Wazuh

Wazuh

81 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-45798

Exploit
  • EPSS 0.89%
  • Veröffentlicht 19.08.2026 16:20:54
  • Zuletzt bearbeitet 15.09.2026 19:25:59

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, compare_wazuh_versions() in src/shared/version_op.c copies the attacker-controlled enrollment V: field into a 10-by...

9.1

CVE-2026-49441

Exploit
  • EPSS 0.75%
  • Veröffentlicht 19.08.2026 16:19:37
  • Zuletzt bearbeitet 15.09.2026 19:21:34

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.3.0 until 4.14.6 and 5.0.0-beta3, the non-merged branch of process_files_from_worker() in framework/wazuh/core/cluster/master.py trusts a peer-contro...

8.2

CVE-2026-41424

Exploit
  • EPSS 0.34%
  • Veröffentlicht 19.08.2026 16:18:24
  • Zuletzt bearbeitet 18.09.2026 14:52:30

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.9.0 until 4.10.4 and 4.14.6, PUT /security/users/{user_id} in api/api/controllers/security_controller.py passes request.get("user") instead of reques...

7.2

CVE-2026-46343

Exploit
  • EPSS 0.26%
  • Veröffentlicht 19.08.2026 16:17:11
  • Zuletzt bearbeitet 18.09.2026 14:54:34

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, WazuhCommon.end_receiving_file() in framework/wazuh/core/cluster/common.py allows a cluster-authenticated node to d...

4.9

CVE-2026-44253

Exploit
  • EPSS 0.42%
  • Veröffentlicht 19.08.2026 16:17:10
  • Zuletzt bearbeitet 22.09.2026 19:47:36

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 3.9.0 until 4.14.5 and 5.0.0-beta2, the Wazuh cluster protocol in framework/wazuh/core/cluster/common.py allows an authenticated cluster node to exhaus...

8.8

CVE-2026-44252

Exploit
  • EPSS 0.31%
  • Veröffentlicht 19.08.2026 16:17:10
  • Zuletzt bearbeitet 18.09.2026 14:55:02

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.5, Wazuh Manager allows a low-privilege read-only API user with manager:read permission to retrieve the cluster key from the element i...

5.3

CVE-2026-44254

Exploit
  • EPSS 0.35%
  • Veröffentlicht 19.08.2026 16:17:10
  • Zuletzt bearbeitet 18.09.2026 14:54:45

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage() in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG(), and src/os_...

5.3

CVE-2026-44255

Exploit
  • EPSS 0.46%
  • Veröffentlicht 19.08.2026 16:15:19
  • Zuletzt bearbeitet 18.09.2026 14:52:15

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AuthenticationManager.check_user() in framework/wazuh/rbac/orm.py performs check_password_hash() only when the supp...

9.1

CVE-2026-48024

Exploit
  • EPSS 0.75%
  • Veröffentlicht 19.08.2026 16:14:20
  • Zuletzt bearbeitet 15.09.2026 19:25:16

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, cluster.unmerge_info() in framework/wazuh/core/cluster/cluster.py constructs paths from peer-controlled merge_type ...

9.1

CVE-2026-48162

Exploit
  • EPSS 0.63%
  • Veröffentlicht 19.08.2026 16:13:15
  • Zuletzt bearbeitet 15.09.2026 19:24:45

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, DistributedAPI.send_tmp_file() in framework/wazuh/core/cluster/dapi/dapi.py joins an attacker-controlled tmp_file v...