Vulnerabilities

TI-2026-44235 CVE-2026-61802

Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config

MEDIUM 62

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00701 Published 2026-08-27 Fixed in 4.14.7 CWE-200

TI-2026-44234 CVE-2026-61800

Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)

MEDIUM 43

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00976 Published 2026-08-27 Fixed in 4.14.7 CWE-22

TI-2026-44226 CVE-2026-61783

Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key

MEDIUM 64

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.

CVSS 4.0HIGH 7.0 Network Low privileges No interaction EPSS 0.00406 Published 2026-08-27 Fixed in 4.14.7 CWE-200

TI-2026-39014 CVE-2026-54084

Wazuh agent enrollment NULL pointer dereference via malformed manager response

MEDIUM 57

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00197 Published 2026-08-27 Fixed in 4.14.7 CWE-476

TI-2026-39015 CVE-2026-54085

Wazuh: Missing input validation in multiple active response scripts allows argument injection

LOW 32

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00418 Published 2026-08-27 Fixed in 4.14.7 CWE-88

TI-2026-39013 CVE-2026-54083

Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion

HIGH 70

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00568 Published 2026-08-27 Fixed in 4.14.7, 5.0.0-beta3 CWE-22

TI-2026-36561 CVE-2026-49392

Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd

MEDIUM 57

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00302 Published 2026-08-19 Fixed in 4.14.6, 5.0.0-beta3 CWE-20

TI-2026-32233 CVE-2026-44256

Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username

LOW 31

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00485 Published 2026-08-19 Fixed in 4.14.6, 5.0.0-beta2 CWE-117

TI-2026-33533 CVE-2026-45798

Stack-based buffer overflow in wazuh

HIGH 72

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00916 Published 2026-08-19 Fixed in 4.14.6, 5.0.0-beta2 CWE-121

TI-2026-36597 CVE-2026-49441

Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch…

MEDIUM 43

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00774 Published 2026-08-19 Fixed in 4.14.6, 5.0.0-beta3 CWE-73

TI-2026-30023 CVE-2026-41424

Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpoint

HIGH 69

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1HIGH 8.2 Network High privileges No interaction EPSS 0.00472 Published 2026-08-19 Fixed in 4.10.4, 4.14.6 CWE-863

TI-2026-32232 CVE-2026-44255

Wazuh: Username Enumeration via Timing Side-Channel

LOW 31

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00616 Published 2026-08-19 Fixed in 4.14.6, 5.0.0-beta2 CWE-208

TI-2026-35467 CVE-2026-48024

Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager

HIGH 74

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00781 Published 2026-08-19 Fixed in 4.14.6, 5.0.0-beta3 CWE-22

TI-2026-35598 CVE-2026-48162

Wazuh: cluster peer can read arbitrary master files and forge offline REST API…

HIGH 74

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00651 Published 2026-08-19 Fixed in 4.14.6, 5.0.0-beta3 CWE-73

TI-2026-32776 CVE-2026-44901

Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

HIGH 72

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00745 Published 2026-08-19 Fixed in 4.14.6, 5.0.0-beta2 CWE-502

TI-2026-32231 CVE-2026-44254

Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path

LOW 25

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00497 Published 2026-08-19 Fixed in 4.14.6, 5.0.0-beta2 CWE-131

TI-2026-34063 CVE-2026-46343

Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()

HIGH 68

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00423 Published 2026-08-19 Fixed in 4.14.6, 5.0.0-beta2 CWE-22

TI-2026-32230 CVE-2026-44253

Wazuh: Cluster Protocol Memory Exhaustion (DoS) via unbounded receive_str allocation and div_msg_box accumulation

MEDIUM 56

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00611 Published 2026-08-19 Fixed in 4.14.5, 5.0.0-beta2 CWE-770

TI-2026-32229 CVE-2026-44252

Wazuh Manager dapi RBAC Bypass Allows Privilege Escalation

HIGH 69

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00544 Published 2026-08-19 Fixed in 4.14.5 CWE-863

TI-2026-52015 CVE-2026-74046

Wazuh 4.4.0 < 4.14.7 DoS via fdecompress_files() Zip Bomb

MEDIUM 64

Wazuh 4.4.0 before 4.14.7 contains a denial of service vulnerability in the fdecompress_files() function within cluster.py that allows authenticated cluster peers to exhaust memory by supplying a malicious synchronizatio…

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00581 Published 2026-08-18 Fixed in 4.14.7 CWE-409

TI-2026-52014 CVE-2026-74044

Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello

LOW 34

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload with…

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00603 Published 2026-08-18 Fixed in 4.14.6 CWE-22

TI-2026-52013 CVE-2026-74039

Wazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_context

MEDIUM 64

Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated attackers with allow_run_as enabled to exhaust CPU resources by submitting arbitrarily deeply nested JSON stru…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00555 Published 2026-08-18 Fixed in 4.14.7 CWE-1333

TI-2026-52012 CVE-2026-74038

Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment

MEDIUM 64

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to cause denial of service by enrolling an agent with a dot-sequence name such as ".." through the enrollment…

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00546 Published 2026-08-18 Fixed in 4.14.6 CWE-22

TI-2026-47603 CVE-2026-67307 · GHSA-v7qc-fpqm-p46f

Wazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory Sync

LOW 30

Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, while validating only the agentid against the authenticated age…

CVSS 4.0HIGH 7.0 Network Low privileges No interaction EPSS 0.00226 Published 2026-08-01 Fixed in 5.0.0-beta3 CWE-345

TI-2026-22555 CVE-2026-28220

Deserialization of untrusted data in wazuh

HIGH 74

Wazuh is a free and open source platform used for threat prevention, detection, and response.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00656 Published 2026-07-20 Fixed in 4.14.5 CWE-502

Vulnerabilities

Filters