DeutschShown in its original language — a full translation is planned for a future version.
Wazuh: Mehrere Schwachstellen
view advisory published 2026-04-27
Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-41499US | — | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, multiple heap-based out-of-bounds WRITE v… | ||||
| CVE-2026-30893US | critical9.9 | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path traversal vulnerability in Wazuh's… | ||||
| CVE-2026-28221US | high8.2 | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer overflow exists in p… | ||||
| CVE-2026-26206US | medium6.5 | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, Wazuh's server API brute-force protection… | ||||
| CVE-2026-26204US | medium5.5 | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs i… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-j4c7-hwjw-8857 vom 2026-04-27external
- GitHub Security Advisory GHSA-m2mr-xhhv-jx58 vom 2026-04-27external
- GitHub Security Advisory GHSA-m8rw-v4f6-8787 vom 2026-04-27external
- GitHub Security Advisory GHSA-q9vv-7w4c-f4cm vom 2026-04-27external
- GitHub Security Advisory GHSA-qvqj-p8mm-r7h3 vom 2026-04-27external
- WID-SEC-W-2026-1295 - CSAF Versionself
- WID-SEC-2026-1295 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan