WID-SEC-W-2026-2620

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Wazuh: Mehrere Schwachstellen

view advisory published 2026-08-02

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um Dateien zu manipulieren, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-67308US——
Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafte…
CVE-2026-67307UShigh7.7OT elevated—
Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, while validating only t…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan