Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: wazuh-manager 4.14.7 Clear all filters
TI-2026-52015 CVE-2026-74046

Wazuh 4.4.0 < 4.14.7 DoS via fdecompress_files() Zip Bomb

Priority MEDIUM 64

Wazuh 4.4.0 before 4.14.7 contains a denial of service vulnerability in the fdecompress_files() function within cluster.py that allows authenticated cluster peers to exhaust memory by supplying a malicious synchronizatio…

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00581 Published 2026-08-18 Fixed in 4.14.7 CWE-409
TI-2026-52013 CVE-2026-74039

Wazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_context

Priority MEDIUM 64

Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated attackers with allow_run_as enabled to exhaust CPU resources by submitting arbitrarily deeply nested JSON stru…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00555 Published 2026-08-18 Fixed in 4.14.7 CWE-1333