Vulnerabilidades en Wazuh
97 resultadosCVE-2026-74041HIGHWazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case MismatchEPSS 0.5%CVE-2026-44251MEDIUMWazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent messageEPSS 0.4%CVE-2026-74043HIGHWazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload FunctionsEPSS 0.4%CVE-2025-62785MEDIUMWazuh fillData NULL pointer dereference causes analysisd crashEPSS 0.4%CVE-2026-32983MEDIUMSSL/TLS Renegotiation DoS in Wazuh Manager authd serviceEPSS 0.4%CVE-2026-74034HIGHWazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom CommandEPSS 0.4%CVE-2026-71540HIGHWazuh Manager cluster header parsing allows pre-authentication memory exhaustionEPSS 0.4%CVE-2026-46343HIGHWazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()EPSS 0.4%CVE-2026-93347MEDIUMWazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_fileEPSS 0.4%CVE-2026-54085HIGHWazuh: Missing input validation in multiple active response scripts allows argument injectionEPSS 0.4%CVE-2026-25790MEDIUMWazuh has Stack-Based Buffer Overflow in Security Configuration Assessment JSON ParserEPSS 0.4%CVE-2025-62789MEDIUMWazuh vulnerable to NULL pointer dereference in fim_alert line 712EPSS 0.4%CVE-2025-62790MEDIUMWazuh vulnerable to NULL pointer dereference in fim_fetch_attributes_stateEPSS 0.4%CVE-2026-61783HIGHWazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.keyEPSS 0.4%CVE-2026-74030MEDIUMWazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias ExpansionEPSS 0.4%CVE-2026-33434MEDIUMWazuh: Rate Limit Bypass via /events EndpointEPSS 0.4%CVE-2026-30893CRITICALWazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peerEPSS 0.4%CVE-2026-112338HIGHWazuh from 4.3.0 before 4.14.9 SSRF via GitHub Module Link PaginationEPSS 0.4%CVE-2025-62787LOWWazuh Vulnerable to Heap-based Buffer Over-read in DecodeWinevtEPSS 0.4%CVE-2025-15617HIGHWazuh GitHub Actions Workflow Exposure of Sensitive CredentialsEPSS 0.4%