Wazuh wazuh-manager

• CVE-2026-93347 Medium 4.9 Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file 0.4%
• CVE-2026-93346 Medium 5.3 Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Condition 0.3%
• CVE-2026-74047 Medium 6.5 Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint 0.3%
• CVE-2026-74045 High 7.1 Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder 0.3%
• CVE-2026-74043 Critical 9.0 Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functions 0.4%
• CVE-2026-74041 High 7.2 Wazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case Mismatch 0.5%
• CVE-2026-74040 Critical 9.1 Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker 0.7%
• CVE-2026-74037 High 7.2 Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_token 0.5%
• CVE-2026-74035 High 7.2 Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_user 0.6%
• CVE-2026-74034 High 7.5 Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Command 0.4%
• CVE-2026-74033 Medium 6.1 Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlers 0.3%
• CVE-2026-74032 Medium 4.3 Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actions 0.3%
• CVE-2026-74031 Medium 6.5 Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helpers 0.5%
• CVE-2026-74030 Medium 4.9 Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansion 0.4%
• CVE-2026-74046 Medium 4.9 Wazuh 4.4.0 < 4.14.7 DoS via fdecompress_files() Zip Bomb 0.6%
• CVE-2026-74044 Medium 6.5 Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello 0.6%
• CVE-2026-74039 Medium 6.5 Wazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_context 0.6%
• CVE-2026-74038 High 7.1 Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment 0.5%
• CVE-2025-15616 Medium 6.7 Wazuh Agent and Manager OS Command Injection and Untrusted Search Path 1.7%
• CVE-2025-15615 Medium 5.8 Wazuh Manager authd service Improper SSL/TLS Renegotiation Handling leading to Denial of Service 0.5%
• CVE-2026-32983 Medium 5.8 SSL/TLS Renegotiation DoS in Wazuh Manager authd service 0.4%