Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: wazuh-manager 4.14.6 Clear all filters
TI-2026-52014 CVE-2026-74044

Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello

Priority LOW 34

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload with…

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00603 Published 2026-08-18 Fixed in 4.14.6 CWE-22
TI-2026-52012 CVE-2026-74038

Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment

Priority MEDIUM 64

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to cause denial of service by enrolling an agent with a dot-sequence name such as ".." through the enrollment…

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00546 Published 2026-08-18 Fixed in 4.14.6 CWE-22