Skip to content
OpenAdvisories
High WID-SEC-2026-2377 8 CVEs

Wazuh: Mehrere Schwachstellen

Published Jul 15, 2026 · Updated Aug 19, 2026 · Revision 4 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.

Product

Wazuh ist eine Sicherheitsüberwachungsplattform, die Funktionen wie Intrusion Detection, Log-Analyse und Sicherheitsinformations- und Ereignismanagement (SIEM) bietet.

Vulnerabilities 8

  • High 8.4
    CVE-2026-28220

    Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API (DAPI) handling allow a cluster peer, or any actor able to authenticate to the cluster channel using t…

    wazuh wazuh
  • High 7.7
    CVE-2026-44252

    Wazuh Manager dapi RBAC Bypass Allows Privilege Escalation

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.5, Wazuh Manager allows a low-privilege read-only API user with manager:read permission to retrieve the cluster key from the element in ossec.c…

    wazuh wazuh
  • High 7.5
    CVE-2026-34150

    Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing

    Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analysisd allows an unauthenticated remote attacker to crash the Wazuh manager's analys…

    wazuh wazuh
  • High 7.5
    CVE-2026-39359

    Wazuh: Unauthenticated Path Traversal in authd via Agent Group Name

    Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.0.0 through 4.10.3 and 4.11.0 through 4.14.4, a logic flaw affects the Wazuh Manager's enrollment daemon (authd) and synchronization daemon (remoted). …

    wazuh wazuh
  • Medium 6.5
    CVE-2026-33754

    Wazuh: Unauthenticated cluster packet length leads to uncontrolled memory allocation (remote DoS)

    Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.9.0 and above, prior to 4.14.5, a remote attacker can trigger memory exhaustion in the cluster protocol parser by sending a crafted message header with…

    wazuh wazuh
  • Medium 6.5
    CVE-2026-44251

    Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message

    Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/shared/msgs.c:389 allows any enrolled Wazuh agent to crash the wazuh-remoted pr…

    wazuh wazuh
  • Medium 4.7
    CVE-2026-40106

    Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buffer overflow vulnerability in the syscheck component of the Wazuh agent for Windows. When expanding …

    wazuh wazuh
  • Medium 4.3
    CVE-2026-33434

    Wazuh: Rate Limit Bypass via /events Endpoint

    Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and above, prior to 4.14.5, a logic error in CheckRateLimitsMiddleware.dispatch() causes the /events endpoint rate check to unconditionally overwri…

    wazuh wazuh

Revision history

  1. #4

    Referenz(en) aufgenommen: EUVD-2026-62551

  2. #3

    Referenz(en) aufgenommen: EUVD-2026-45978

  3. #2

    Referenz(en) aufgenommen: EUVD-2026-45077, EUVD-2026-45076, EUVD-2026-45089, EUVD-2026-45088, EUVD-2026-45079, EUVD-2026-45078

  4. #1

    Initiale Fassung

References