Vulnerabilities in wazuh
97 resultsCVE-2026-62365MEDIUMWazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XMLEPSS 0.3%CVE-2025-64483MEDIUMWazuh API – Agent Configuration Has Improper Access Control in Agent Enrollment EndpointEPSS 0.3%CVE-2024-35177HIGHImproper Access Control in wazuh-agentEPSS 0.3%CVE-2026-41499MEDIUMWazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()EPSS 0.3%CVE-2024-47770MEDIUMAbility to view Agent list with no privilege access in wazuh-dashboardEPSS 0.3%CVE-2026-112341HIGHWazuh before 4.14.9 SQL Injection via WazuhDBBackend _substitute_paramsEPSS 0.2%CVE-2023-42463HIGHwazuh-logcollector integer underflow local privilege escalationEPSS 0.2%CVE-2026-67307HIGHWazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory SyncEPSS 0.2%CVE-2025-15612MEDIUMWazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCEEPSS 0.2%CVE-2026-112337MEDIUMWazuh 3.7.0 before 4.14.9 SSRF via Azure Graph nextLink PaginationEPSS 0.2%CVE-2026-26206MEDIUMWazuh: API brute-force protection bypass via race condition in login attempt trackingEPSS 0.2%CVE-2026-54084MEDIUMWazuh agent enrollment NULL pointer dereference via malformed manager responseEPSS 0.2%CVE-2025-54866LOWWazuh installation fails to protected authd.pass on WindowsEPSS 0.2%CVE-2026-26204MEDIUMWazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertDataEPSS 0.2%CVE-2026-112339HIGHWazuh 3.9.0 before 4.14.9 Missing TLS Hostname Verification in fluent-forward ModuleEPSS 0.2%CVE-2026-40106MEDIUMWazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)EPSS 0.1%CVE-2026-112335MEDIUMWazuh Agent 1.0.0 before 4.14.9 Stack Buffer Overflow via read_snortfullEPSS 0.1%