Skip to content
OpenAdvisories
High WID-SEC-2026-0771 6 CVEs

Wazuh: Mehrere Schwachstellen ermöglichen

Published Mar 17, 2026 · Updated Mar 17, 2026 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Root-Rechte zu erlangen, beliebigen Code mit Root-Rechten auszuführen oder einen Denial-of-Service-Zustand herbeizuführen.

Product

Wazuh ist eine Sicherheitsüberwachungsplattform, die Funktionen wie Intrusion Detection, Log-Analyse und Sicherheitsinformations- und Ereignismanagement (SIEM) bietet.

Vulnerabilities 6

  • Critical 9.1
    CVE-2026-25769 Public exploit

    Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution (RCE) vulnerability due to Deserialization of Untrusted Data). All Wazuh deployments using cluster mode (m…

    wazuh wazuh
  • Critical 9.1
    CVE-2026-25770

    Wazuh has Privilege Escalation to Root via Cluster Protocol File Write

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, a privilege escalation vulnerability exists in the Wazuh Manager's cluster synchronization protocol. The `wazu…

    wazuh wazuh
  • High 7.7
    CVE-2025-30201

    Wazuh NetNTLMv2 Hash Theft In Multiple Centralized Configuration Capabilities

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.13.0, a vulnerability in Wazuh Agent allows authenticated attackers to force NTLM authentication through malicious UNC paths in various agent conf…

    wazuh wazuh
  • Medium 5.3
    CVE-2026-25771

    Wazuh Vulnerable to Denial of Service via Synchronous I/O Blocking in Asynchronous Authentication Middleware

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.3.0 and prior to version 4.14.3, a Denial of Service (DoS) vulnerability exists in the Wazuh API authentication middleware (`middlewares.py`). …

    wazuh wazuh
  • Medium 4.9
    CVE-2026-25772

    Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module (`wdb_delta_ev…

    wazuh wazuh
  • Medium 4.9
    CVE-2026-25790

    Wazuh has Stack-Based Buffer Overflow in Security Configuration Assessment JSON Parser

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, multiple stack-based buffer overflows exist in the Security Configuration Assessment (SCA) decoder (`wazuh-ana…

    wazuh wazuh

Revision history

  1. #1

    Initiale Fassung

References