Wazuh

39 CVEs across 9 Wazuh products. Browse Wazuh vulnerabilities, severities, and proof-of-concept exploits.

Wazuh products with known CVEs

ProductCVEs
Wazuh53
Wazuh-Manager3
Wazuh Agent1
Wazuh-Agent1
Wazuh-Dashboard1
Wazuh-Dashboard-Plugins1
Wazuh (Github Actions)1
Wazuh-Kibana-App1
Wazuh Provisioning Scripts (Agent Build Environment)1
Wazuh CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-67308Critical10.02026-08-01Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull…
CVE-2026-67307Medium6.32026-08-01Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, wh…
CVE-2026-28220High8.42026-07-20Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API (D…
CVE-2026-44251Medium6.52026-07-17Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer un…
CVE-2026-40106Medium4.72026-07-17Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buf…
CVE-2026-39359High7.52026-07-17Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.0.0 through 4.10.3 and 4.11.0 through 4.14.4, a log…
CVE-2026-34150High7.52026-07-17Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overf…
CVE-2026-33754Medium6.52026-07-17Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.9.0 and above, prior to 4.14.5, a remote attacker c…
CVE-2026-33434Medium4.32026-07-17Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and above, prior to 4.14.5, a logic error in Ch…
CVE-2026-41499Medium6.52026-04-29Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, multiple heap-based…
CVE-2026-30893Critical9.02026-04-29Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path traversal vul…
CVE-2026-28221Medium6.52026-04-29Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer…
CVE-2026-26206Medium6.52026-04-29Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, Wazuh's server API b…
CVE-2026-26204Medium4.42026-04-29Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-…
CVE-2025-15612Medium4.82026-03-27Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS cer…
CVE-2025-15617Medium6.52026-03-27Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded ar…
CVE-2025-15616Medium6.72026-03-27Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers…
CVE-2025-15615Medium5.82026-03-27Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerab…
CVE-2026-32984Low3.52026-03-27Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted…
CVE-2026-32983Medium5.82026-03-27Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerab…
CVE-2023-7340Low3.52026-03-27Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted…
CVE-2026-25790Medium4.92026-03-17Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, multiple s…
CVE-2026-25772Medium4.92026-03-17Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-ba…
CVE-2026-25771Medium5.32026-03-17Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.3.0 and prior to version 4.14.3, a Denial o…
CVE-2026-25770Critical9.12026-03-17Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, a privileg…
CVE-2026-25769Critical9.12026-03-17Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution (RCE)…
CVE-2025-64169Medium4.92025-11-21Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 3.7.0 to before 4.12.0, fim_alert() implementation d…
CVE-2025-54866Medium5.52025-11-21Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.3.0 to before 4.13.0, a missing ACL on "C:\Program…
CVE-2025-30201High7.72025-11-21Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.13.0, a vulnerability in Wazuh Agent allows au…
CVE-2025-644832025-11-21Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in cert…
CVE-2025-62792High7.52025-10-29Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in w_expression_match(…
CVE-2025-62791High7.52025-10-29Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, DecodeCiscat() implementation does not check the…
CVE-2025-62790High7.52025-10-29Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_fetch_attributes_state() implementation does…
CVE-2025-62789High7.52025-10-29Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_alert() implementation does not check whethe…
CVE-2025-62788High7.52025-10-29Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, w_copy_event_for_log() references memory (initia…
CVE-2025-62787High7.52025-10-29Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.10.2, a buffer over-read occurs in DecodeWinevt() when…
CVE-2025-62786High8.12025-10-29Wazuh is a free and open source platform used for threat prevention, detection, and response. A heap-based out-of-bounds WRITE occurs in decode_win_permissions…
CVE-2025-62785High7.52025-10-29Wazuh is a free and open source platform used for threat prevention, detection, and response. fillData() implementation does not check whether value is NULL or…
CVE-2025-59938Medium6.52025-09-27Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd…
CVE-2024-1243High7.22025-06-11Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure…
CVE-2025-24016Critical9.92025-02-10Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe d…
CVE-2024-47770Medium4.62025-02-03Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtual…
CVE-2024-35177High7.82025-02-03Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtual…
CVE-2024-32038Critical9.82024-04-19Wazuh is a free and open source platform used for threat prevention, detection, and response. There is a buffer overflow hazard in wazuh-analysisd when handlin…
CVE-2023-50260High8.82024-04-19Wazuh is a free and open source platform used for threat prevention, detection, and response. A wrong validation in the `host_deny` script allows to write any…
CVE-2023-49275Medium6.52024-04-19Wazuh is a free and open source platform used for threat prevention, detection, and response. A NULL pointer dereference was detected during fuzzing of the ana…
CVE-2023-42463High7.42024-01-12Wazuh is a free and open source platform used for threat prevention, detection, and response. This bug introduced a stack overflow hazard that could allow a lo…
CVE-2023-42455High8.82023-10-09Wazuh is a security detection, visibility, and compliance open source project. In versions 4.4.0 and 4.4.1, it is possible to get the Wazuh API administrator k…
CVE-2022-40497High8.82022-09-28Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Acti…
CVE-2021-44079Critical9.82021-11-22In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting in remote…
CVE-2021-41821Medium6.52021-09-29Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service. A crafted message must be se…
CVE-2021-26814High8.82021-03-06Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authentic…
CVE-2018-19666High7.82018-11-29The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the asso…