DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Wazuh: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-07-15
Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-44252US | high8.8OT erhöht | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.5, Wazuh Manager allows a low-privilege read-only API user with… | ||||
| CVE-2026-28220US | critical9.1 | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API (DAPI) handling allow a… | ||||
| CVE-2026-44251US | — | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/… | ||||
| CVE-2026-40106US | high7.8 | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buffer overflow vulnerab… | ||||
| CVE-2026-39359US | — | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.0.0 through 4.10.3 and 4.11.0 through 4.14.4, a logic flaw affects the W… | ||||
| CVE-2026-34150US | — | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysis… | ||||
| CVE-2026-33754US | — | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.9.0 and above, prior to 4.14.5, a remote attacker can trigger memory exh… | ||||
| CVE-2026-33434US | high7.1 | — | ||
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and above, prior to 4.14.5, a logic error in CheckRateLimitsMiddlewa… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- GitHub Security Advisory GHSA-34fx-c2xw-xcpg vom 2026-07-15external
- GitHub Security Advisory GHSA-37qc-8242-6crg vom 2026-07-15external
- GitHub Security Advisory GHSA-476v-28pp-5wg9 vom 2026-07-15external
- GitHub Security Advisory GHSA-6q95-fcwc-4h44 vom 2026-07-15external
- GitHub Security Advisory GHSA-jv5r-5p7c-g9fq vom 2026-07-15external
- GitHub Security Advisory GHSA-qvrc-pcfc-jhqc vom 2026-07-15external
- GitHub Security Advisory GHSA-rvr9-89q8-w883 vom 2026-07-15external
- GitHub Security Advisory GHSA-w2jj-pfq9-mh9p vom 2026-07-15external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan