Skip to content
OpenAdvisories
Medium WID-SEC-2026-0908 7 CVEs

Wazuh: Mehrere Schwachstellen

Published Mar 29, 2026 · Updated Mar 29, 2026 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.

Product

Wazuh ist eine Sicherheitsüberwachungsplattform, die Funktionen wie Intrusion Detection, Log-Analyse und Sicherheitsinformations- und Ereignismanagement (SIEM) bietet.

Vulnerabilities 7

  • Medium 6.7
    CVE-2025-15616

    Wazuh Agent and Manager OS Command Injection and Untrusted Search Path

    Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary commands through various components including logcollector configuration, mail…

    wazuh wazuh-manager wazuh-agent
  • Medium 6.5
    CVE-2025-15617 Public exploit

    Wazuh GitHub Actions Workflow Exposure of Sensitive Credentials

    Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded artifacts. Attackers can use the exposed token within a limited time window to perform unauthorized ac…

    wazuh Wazuh (GitHub Actions)
  • Medium 5.8
    CVE-2025-15615

    Wazuh Manager authd service Improper SSL/TLS Renegotiation Handling leading to Denial of Service

    Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation r…

    wazuh wazuh-manager
  • Medium 5.8
    CVE-2026-32983

    SSL/TLS Renegotiation DoS in Wazuh Manager authd service

    Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation r…

    wazuh wazuh-manager
  • Medium 4.8
    CVE-2025-15612

    Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE

    Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. Attackers with network access can perform man-in-the-middle attacks to intercep…

    wazuh Wazuh Provisioning Scripts (Agent Build Environment)
  • Low 3.5
    CVE-2023-7340

    Wazuh authd service (os_auth) Heap-based Buffer Overflow

    Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting…

    wazuh wazuh
  • Low 3.5
    CVE-2026-32984

    Heap buffer overflow in wazuh-authd

    Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting…

    wazuh wazuh

Revision history

  1. #1

    Initiale Fassung

References