DeutschShown in its original language — a full translation is planned for a future version.
Wazuh: Mehrere Schwachstellen
view advisory published 2026-07-15
Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-44252US | high8.8OT elevated | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.5, Wazuh Manager allows a low-privilege read-only API user with… | ||||
| CVE-2026-28220US | critical9.1 | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API (DAPI) handling allow a… | ||||
| CVE-2026-44251US | — | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/… | ||||
| CVE-2026-40106US | high7.8 | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buffer overflow vulnerab… | ||||
| CVE-2026-39359US | — | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.0.0 through 4.10.3 and 4.11.0 through 4.14.4, a logic flaw affects the W… | ||||
| CVE-2026-34150US | — | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysis… | ||||
| CVE-2026-33754US | — | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.9.0 and above, prior to 4.14.5, a remote attacker can trigger memory exh… | ||||
| CVE-2026-33434US | high7.1 | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and above, prior to 4.14.5, a logic error in CheckRateLimitsMiddlewa… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-34fx-c2xw-xcpg vom 2026-07-15external
- GitHub Security Advisory GHSA-37qc-8242-6crg vom 2026-07-15external
- GitHub Security Advisory GHSA-476v-28pp-5wg9 vom 2026-07-15external
- GitHub Security Advisory GHSA-6q95-fcwc-4h44 vom 2026-07-15external
- GitHub Security Advisory GHSA-jv5r-5p7c-g9fq vom 2026-07-15external
- GitHub Security Advisory GHSA-qvrc-pcfc-jhqc vom 2026-07-15external
- GitHub Security Advisory GHSA-rvr9-89q8-w883 vom 2026-07-15external
- GitHub Security Advisory GHSA-w2jj-pfq9-mh9p vom 2026-07-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan