Wazuh Wazuh

• CVE-2025-24016 Critical 9.9 Exploited Remote code execution in Wazuh server 93.8%
• CVE-2026-62365 Medium 5.3 Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XML 0.3%
• CVE-2026-71540 High 7.5 Wazuh Manager cluster header parsing allows pre-authentication memory exhaustion 0.4%
• CVE-2026-61811 Medium 6.5 Wazuh: Unbounded Recursion in os_xml `_getattributes()` Causes analysisd Worker Thread Stack Exhaustion 0.4%
• CVE-2026-61802 Medium 6.5 Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config 0.7%
• CVE-2026-61800 Critical 9.1 Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893) 1.0%
• CVE-2026-61783 High 7.0 Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key 0.4%
• CVE-2026-54084 Medium 5.3 Wazuh agent enrollment NULL pointer dereference via malformed manager response 0.2%
• CVE-2026-54085 High 7.1 Wazuh: Missing input validation in multiple active response scripts allows argument injection 0.4%
• CVE-2026-54083 High 8.1 Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion 0.6%
• CVE-2026-49392 Medium 5.3 Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd 0.3%
• CVE-2026-44256 Medium 5.3 Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username 0.5%
• CVE-2026-45798 High 7.5 Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: field 0.9%
• CVE-2026-49441 Critical 9.1 Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh manager 0.8%
• CVE-2026-41424 High 8.2 Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpoint 0.5%
• CVE-2026-44255 Medium 5.3 Wazuh: Username Enumeration via Timing Side-Channel 0.6%
• CVE-2026-48024 Critical 9.1 Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager 0.8%
• CVE-2026-48162 Critical 9.1 Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh manager 0.7%
• CVE-2026-44901 High 8.4 Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.7%
• CVE-2026-44254 Medium 5.3 Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path 0.5%
• CVE-2026-46343 High 7.5 Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file() 0.4%
• CVE-2026-44253 Medium 4.9 Wazuh: Cluster Protocol Memory Exhaustion (DoS) via unbounded receive_str allocation and div_msg_box accumulation 0.6%
• CVE-2026-44252 High 7.7 Wazuh Manager dapi RBAC Bypass Allows Privilege Escalation 0.5%
• CVE-2026-67307 Medium 6.3 Wazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory Sync 0.2%
• CVE-2026-67308 Critical 9.3 Wazuh GitHub Actions Shell Injection via Fork Pull Request 0.7%
• CVE-2026-28220 High 8.4 Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node 0.7%
• CVE-2026-44251 Medium 6.5 Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message 0.4%
• CVE-2026-40106 Medium 4.7 Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS) 0.1%
• CVE-2026-39359 High 7.5 Wazuh: Unauthenticated Path Traversal in authd via Agent Group Name 0.4%
• CVE-2026-34150 High 7.5 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing 0.4%
• CVE-2026-33754 Medium 6.5 Wazuh: Unauthenticated cluster packet length leads to uncontrolled memory allocation (remote DoS) 0.4%
• CVE-2026-33434 Medium 4.3 Wazuh: Rate Limit Bypass via /events Endpoint 0.4%
• CVE-2026-41499 Medium 6.5 Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string() 0.3%
• CVE-2026-30893 Critical 9.0 Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peer 0.4%
• CVE-2026-28221 Medium 6.5 Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64 0.4%
• CVE-2026-26206 Medium 6.5 Wazuh: API brute-force protection bypass via race condition in login attempt tracking 0.2%
• CVE-2026-26204 Medium 4.4 Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData 0.2%
• CVE-2023-7340 Low 3.5 Wazuh authd service (os_auth) Heap-based Buffer Overflow 0.3%
• CVE-2026-32984 Low 3.5 Heap buffer overflow in wazuh-authd 0.3%
• CVE-2026-25790 Medium 4.9 Wazuh has Stack-Based Buffer Overflow in Security Configuration Assessment JSON Parser 0.4%
• CVE-2026-25772 Medium 4.9 Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow 0.3%
• CVE-2026-25771 Medium 5.3 Wazuh Vulnerable to Denial of Service via Synchronous I/O Blocking in Asynchronous Authentication Middleware 0.5%
• CVE-2026-25770 Critical 9.1 Wazuh has Privilege Escalation to Root via Cluster Protocol File Write 1.0%
• CVE-2026-25769 Critical 9.1 Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization 9.1%
• CVE-2025-64169 Medium 5.1 Wazuh NULL pointer dereference in fim_alert line 666 0.4%
• CVE-2025-54866 Low 1.8 Wazuh installation fails to protected authd.pass on Windows 0.2%
• CVE-2025-30201 High 7.7 Wazuh NetNTLMv2 Hash Theft In Multiple Centralized Configuration Capabilities 0.8%
• CVE-2025-62792 Medium 6.9 Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_match 0.4%
• CVE-2025-62791 Medium 6.9 Wazuh vulnerable to NULL pointer dereference in DecodeCiscat 0.3%
• CVE-2025-62790 Medium 6.9 Wazuh vulnerable to NULL pointer dereference in fim_fetch_attributes_state 0.4%