Skip to content
OpenAdvisories
High WID-SEC-2026-1295 5 CVEs

Wazuh: Mehrere Schwachstellen

Published Apr 27, 2026 · Updated Apr 29, 2026 · Revision 2 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.

Product

Wazuh ist eine Sicherheitsüberwachungsplattform, die Funktionen wie Intrusion Detection, Log-Analyse und Sicherheitsinformations- und Ereignismanagement (SIEM) bietet.

Vulnerabilities 5

  • Critical 9.0
    CVE-2026-30893

    Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peer

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path traversal vulnerability in Wazuh's cluster synchronization extraction routine allows an authenticated cluster pee…

    wazuh wazuh
  • Medium 6.5
    CVE-2026-26206

    Wazuh: API brute-force protection bypass via race condition in login attempt tracking

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, Wazuh's server API brute-force protection for POST /security/user/authenticate can be bypassed by sending concurrent aut…

    wazuh wazuh
  • Medium 6.5
    CVE-2026-28221

    Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer overflow exists in print_hex_string() in wazuh-remoted. The bug is triggered when formatting attack…

    wazuh wazuh
  • Medium 6.5
    CVE-2026-41499

    Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, multiple heap-based out-of-bounds WRITE vulnerabilities exist in parse_uname_string() (remoted_op.c). This function proc…

    wazuh wazuh
  • Medium 4.4
    CVE-2026-26204

    Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs in GetAlertData, resulting in writing a NULL byte exactly 1 byte before the star…

    wazuh wazuh

Revision history

  1. #2

    EUVD Referenzen aufgenommen, Produktzuordnung überprüft

  2. #1

    Initiale Fassung

References