roninreilly/wazuh-unauth-chain

PoC

Wazuh PoC chaining CVE-2026-74034 file read and CVE-2026-74041 command execution; fixed in 4.14.8. Python standard library only.

view exploit source poc_in_githubauthor roninreillypublished 2026-10-14catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-74034US	high7.5OT elevated	0.43% (37th)	Exploit	2026-10-13
Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with attacker-controlled file_path.…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.