cybersecplayground/CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC

PoC

A critical RCE vulnerability has been identified in the Wazuh server due to unsafe deserialization in the wazuh-manager package. This bug affects Wazuh versions ≥ 4.4.0 and has been patched in version 4.9.1.

view exploit source poc_in_githubauthor cybersecplaygroundpublished 2025-04-21catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-24016US	—OT critical	93.8% (100th)	KEV	2025-02-10
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulner…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan