DeutschShown in its original language — a full translation is planned for a future version.
Wazuh: Mehrere Schwachstellen
view advisory published 2026-08-17
Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-71540US | — | — | ||
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.9.0 until 4.14.7, wazuh-clusterd in framework/wazuh/co… | ||||
| CVE-2026-61811US | — | — | ||
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the _getattributes() function in src… | ||||
| CVE-2026-61802US | — | — | ||
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user c… | ||||
| CVE-2026-61800US | — | — | ||
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster… | ||||
| CVE-2026-61783US | medium6.5OT elevated | — | ||
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-privi… | ||||
| CVE-2026-54085US | — | — | ||
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response sc… | ||||
| CVE-2026-54084US | — | — | ||
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-m… | ||||
| CVE-2026-54083US | — | — | ||
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path t… | ||||
| CVE-2026-74046US | — | — | ||
Wazuh 4.4.0 before 4.14.7 contains a denial of service vulnerability in the fdecompress_files() function within cluster.py that allows authenticated cluster peers to exhaust memory… | ||||
| CVE-2026-74044US | — | — | ||
Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped nod… | ||||
| CVE-2026-74039US | — | — | ||
Wazuh 4.0.0 before 4.14.7 and 5.0.0-beta2 contain a denial of service vulnerability that allows authenticated attackers with allow_run_as enabled to exhaust CPU resources by submit… | ||||
| CVE-2026-74038US | — | — | ||
Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to cause denial of service by enrolling an agent with a dot-sequence… | ||||
| CVE-2026-62365US | — | — | ||
02
references
External citations — patches, advisories, analysis.
- Wazuh v4.14.7 Release vom 2026-08-17external
- GitHub Security Advisory GHSA-3jff-488g-335f vom 2026-08-17external
- GitHub Security Advisory GHSA-573w-mqw4-jvmr vom 2026-08-17external
- GitHub Security Advisory GHSA-5vh8-34r8-q74q vom 2026-08-17external
- GitHub Security Advisory GHSA-6j39-726h-fx6p vom 2026-08-17external
- GitHub Security Advisory GHSA-78wx-4r6w-w73f vom 2026-08-17external
- GitHub Security Advisory GHSA-9wv5-7qwx-m9w5 vom 2026-08-17external
- GitHub Security Advisory GHSA-chmg-89pf-2q82 vom 2026-08-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan