WID-SEC-W-2026-0771

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Wazuh: Mehrere Schwachstellen ermöglichen

view advisory published 2026-03-17

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Root-Rechte zu erlangen, beliebigen Code mit Root-Rechten auszuführen oder einen Denial-of-Service-Zustand herbeizuführen.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2026-25790UShigh7.2—
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, multiple stack-based buffer ove…
CVE-2026-25772UShigh7.2—
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow v…
CVE-2026-25771UShigh7.5—
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.3.0 and prior to version 4.14.3, a Denial of Service (DoS) vulne…
CVE-2026-25770UShigh7.2—
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, a privilege escalation vulnerab…
CVE-2026-25769US—Exploit
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution (RCE) vulnerability due to…
CVE-2025-30201UScritical9.1OT elevated—
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.13.0, a vulnerability in Wazuh Agent allows authenticated attackers…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan