Vulnerabilidades em wazuh
97 resultadosAnálise Vexday
Wazuh apresenta 38 vulnerabilidades registradas, com 12 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Apenas 1 está sob exploração ativa (KEV) e 6 são críticas, sugerindo impacto moderado; a fraqueza dominante é CWE-476 (null pointer dereference), típica de falhas de validação que afetam disponibilidade.
CVE-2025-64169MEDIUMWazuh NULL pointer dereference in fim_alert line 666EPSS 0.4%CVE-2025-62792MEDIUMWazuh vulnerable to Heap-based Buffer Over-read in w_expression_matchEPSS 0.4%CVE-2026-28221MEDIUMWazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64EPSS 0.4%CVE-2025-59938MEDIUMHeap buffer overflow in wazuh-analysisdEPSS 0.4%CVE-2026-61811MEDIUMWazuh: Unbounded Recursion in os_xml `_getattributes()` Causes analysisd Worker Thread Stack ExhaustionEPSS 0.4%CVE-2026-33754MEDIUMWazuh: Unauthenticated cluster packet length leads to uncontrolled memory allocation (remote DoS)EPSS 0.4%CVE-2026-34150HIGHWazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsingEPSS 0.4%CVE-2026-39359HIGHWazuh: Unauthenticated Path Traversal in authd via Agent Group NameEPSS 0.4%CVE-2026-112340HIGHWazuh 4.9.0 before 4.14.9 Authorization Header Override via /api/requestEPSS 0.3%CVE-2026-74033HIGHWazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster HandlersEPSS 0.3%CVE-2026-74045HIGHWazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM DecoderEPSS 0.3%CVE-2025-62791MEDIUMWazuh vulnerable to NULL pointer dereference in DecodeCiscatEPSS 0.3%CVE-2026-25772MEDIUMWazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer UnderflowEPSS 0.3%CVE-2026-74032MEDIUMWazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actionsEPSS 0.3%CVE-2023-7340MEDIUMWazuh authd service (os_auth) Heap-based Buffer OverflowEPSS 0.3%CVE-2026-93346MEDIUMWazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race ConditionEPSS 0.3%CVE-2026-74047HIGHWazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config EndpointEPSS 0.3%CVE-2025-62788MEDIUMWazuh Vulnerable to Heap Use After Free in w_copy_event_for_logEPSS 0.3%CVE-2026-49392MEDIUMWazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckdEPSS 0.3%CVE-2026-32984MEDIUMHeap buffer overflow in wazuh-authdEPSS 0.3%