wazuh wazuh

Name: wazuh wazuh
Brand: wazuh

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical19high6medium0low

updated 2026-10-27

vulnerabilities (40)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-24016US	—OT critical	93.8% (100th)	KEV	4.9.1	2025-02-10	4.4.0, → 4.9.1
CVE-2026-25769US	—	8.92% (95th)	Exploit	4.14.3	2026-03-17	4.0.0, → 4.14.3
CVE-2023-50260US	high8.8	41.2% (99th)	—	4.7.2	2024-04-19	4.2.0, → 4.7.2
CVE-2024-32038US	critical9.8	1.05% (64th)	—	4.7.2	2024-04-19	2 versions
CVE-2026-25770US	high7.2	1.01% (63rd)	—	4.14.3	2026-03-17	3.9.0, → 4.14.3
CVE-2023-49275US	medium6.5	0.88% (59th)	—	4.7.1	2024-04-19	3.2.0, → 4.7.1
CVE-2025-30201US	critical9.1OT elevated	0.81% (57th)	—	no fix	2025-11-21	≤ < 4.13.0
CVE-2026-67308US	—	0.73% (54th)	—	44bf114d2f4901aa82ecbb9e5b0780f7c3ca5263	2026-08-01	0 → 44bf114d2f4901aa82ecbb9e5b0780f7c3ca5263
CVE-2025-62786US	high8.1	0.73% (54th)	—	no fix	2025-10-29	≤ < 4.10.2
CVE-2026-28220US	critical9.1	0.66% (51st)	—	4.14.5	2026-07-20	4.0.0, → 4.14.5
CVE-2026-25771US	high7.5	0.48% (41st)	—	4.14.3	2026-03-17	4.3.0, → 4.14.3
CVE-2026-44251US	—	0.44% (38th)	—	4.14.5	2026-07-17	3.0.0, → 4.14.5
CVE-2025-62785US	high7.5	0.44% (38th)	—	no fix	2025-10-29	≤ < 4.10.2
CVE-2025-62790US	high7.5	0.41% (35th)	—	no fix	2025-10-29	≤ < 4.11.0
CVE-2025-62789US	high7.5	0.41% (35th)	—	no fix	2025-10-29	≤ < 4.11.0
CVE-2026-25790US	high7.2	0.40% (34th)	—	4.14.3	2026-03-17	3.9.0, → 4.14.3
CVE-2026-33434US	high7.1	0.40% (34th)	—	4.14.5	2026-07-17	4.6.0, → 4.14.5
CVE-2026-30893US	critical9.9	0.40% (34th)	—	4.14.4	2026-04-29	4.4.0, → 4.14.4
CVE-2025-62787US	high7.5	0.40% (34th)	—	no fix	2025-10-29	≤ < 4.10.2
CVE-2025-64169US	medium4.9	0.39% (32nd)	—	4.12.0	2025-11-21	3.7.0, → 4.12.0
CVE-2025-62792US	high7.5	0.38% (32nd)	—	no fix	2025-10-29	≤ < 4.12.0
CVE-2026-28221US	high8.2	0.38% (32nd)	—	4.14.4	2026-04-29	4.8.0, → 4.14.4
CVE-2025-59938US	—	0.38% (31st)	—	4.11.0	2025-09-27	3.8.0, → 4.11.0
CVE-2026-34150US	—	0.37% (30th)	—	4.14.5	2026-07-17	1.0.0, → 4.14.5
CVE-2026-33754US	—	0.37% (31st)	—	4.14.5	2026-07-17	3.9.0, → 4.14.5
CVE-2026-39359US	—	0.36% (30th)	—	4.10.4	2026-07-17	2 versions
CVE-2025-62791US	high7.5	0.34% (27th)	—	no fix	2025-10-29	≤ < 4.11.0
CVE-2023-7340US	medium4.3	0.33% (26th)	—	no fix	2026-03-27	≤ 3.5.0 ≤4.3.10
CVE-2026-25772US	high7.2	0.33% (25th)	—	4.14.3	2026-03-17	4.4.0, → 4.14.3
CVE-2025-62788US	high7.5	0.32% (25th)	—	no fix	2025-10-29	≤ < 4.11.0
CVE-2026-32984US	—	0.30% (23rd)	—	no fix	2026-03-27	2 versions
CVE-2024-35177US	—	0.26% (18th)	—	4.9.0	2025-02-03	3.0.0, → 4.9.0
CVE-2026-41499US	—	0.25% (17th)	—	4.14.4	2026-04-29	4.0.0, → 4.14.4
CVE-2024-47770US	high8.0	0.25% (17th)	—	no fix	2025-02-03	≤ < 4.9.1
CVE-2023-42463US	high7.8	0.24% (14th)	—	no fix	2024-01-12	≤ < 4.5.3
CVE-2026-67307US	high7.7OT elevated	0.23% (13th)	—	5.0.0-beta3	2026-08-01	0 → 5.0.0-beta3
CVE-2026-26206US	medium6.5	0.21% (11th)	—	4.14.4	2026-04-29	4.0.0, → 4.14.4
CVE-2025-54866US	medium5.5OT elevated	0.18% (8th)	—	4.13.0	2025-11-21	4.3.0, → 4.13.0
CVE-2026-26204US	medium5.5	0.17% (6th)	—	4.14.4	2026-04-29	1.0.0, → 4.14.4
CVE-2026-40106US	high7.8	0.13% (3rd)	—	4.14.5	2026-07-17	4.6.0, → 4.14.5

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference6 CVEs
CWE-122Heap-based Buffer Overflow5 CVEs
CWE-252Unchecked Return Value5 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)4 CVEs
CWE-124Buffer Underwrite ('Buffer Underflow')3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)40 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan