DeutschShown in its original language — a full translation is planned for a future version.
Wazuh: Mehrere Schwachstellen
view advisory published 2026-03-29
Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-15612US | high8.1 | — | ||
Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation.… | ||||
| CVE-2025-15617US | high8.1 | Exploit | ||
Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded artifacts. Attackers ca… | ||||
| CVE-2025-15616US | high7.2 | — | ||
Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary… | ||||
| CVE-2025-15615US | high7.5OT elevated | — | ||
Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows rem… | ||||
| CVE-2026-32984US | — | — | ||
Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can… | ||||
| CVE-2026-32983US | high7.5OT elevated | — | ||
Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows rem… | ||||
| CVE-2023-7340US | medium4.3 | — | ||
Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can… | ||||
02
references
External citations — patches, advisories, analysis.
- EU Vulnerability Database vom 2026-03-29external
- GitHub Security Advisory vom 2026-03-29external
- GitHub Security Advisory vom 2026-03-29external
- GitHub Security Advisory vom 2026-03-29external
- GitHub Security Advisory vom 2026-03-29external
- GitHub Security Advisory vom 2026-03-29external
- GitHub Security Advisory vom 2026-03-29external
- GitHub Security Advisory vom 2026-03-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan