Skip to content
OpenAdvisories
High WID-SEC-2026-2699 10 CVEs

Wazuh: Mehrere Schwachstellen

Published Aug 6, 2026 · Updated Aug 19, 2026 · Revision 2 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen SQL-Injection Angriff durchzuführen.

Product

Wazuh ist eine Sicherheitsüberwachungsplattform, die Funktionen wie Intrusion Detection, Log-Analyse und Sicherheitsinformations- und Ereignismanagement (SIEM) bietet.

Vulnerabilities 10

  • Critical 9.1
    CVE-2026-48024

    Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, cluster.unmerge_info() in framework/wazuh/core/cluster/cluster.py constructs paths from peer-controlled merge_type and name …

    wazuh wazuh
  • Critical 9.1
    CVE-2026-49441

    Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh manager

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.3.0 until 4.14.6 and 5.0.0-beta3, the non-merged branch of process_files_from_worker() in framework/wazuh/core/cluster/master.py trusts a peer-controlled file…

    wazuh wazuh
  • High 8.4
    CVE-2026-44901

    Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge() in framework/wazuh/core/results.py trusts the sort_casting field in a cluster worker's JSON…

    wazuh wazuh
  • High 8.2
    CVE-2026-41424

    Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpoint

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.9.0 until 4.10.4 and 4.14.6, PUT /security/users/{user_id} in api/api/controllers/security_controller.py passes request.get("user") instead of request.context…

    wazuh wazuh
  • High 7.5
    CVE-2026-45798

    Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: field

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, compare_wazuh_versions() in src/shared/version_op.c copies the attacker-controlled enrollment V: field into a 10-byte stack …

    wazuh wazuh
  • High 7.5
    CVE-2026-46343

    Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, WazuhCommon.end_receiving_file() in framework/wazuh/core/cluster/common.py allows a cluster-authenticated node to delete fil…

    wazuh wazuh
  • Medium 5.3
    CVE-2026-44254

    Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage() in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG(), and src/os_crypto/sh…

    wazuh wazuh
  • Medium 5.3
    CVE-2026-44255

    Wazuh: Username Enumeration via Timing Side-Channel

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AuthenticationManager.check_user() in framework/wazuh/rbac/orm.py performs check_password_hash() only when the supplied user…

    wazuh wazuh
  • Medium 5.3
    CVE-2026-44256

    Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.4.0 until 4.14.6 and 5.0.0-beta2, api/api/middlewares.py decodes the Basic authentication username before credential validation and passes it to the access lo…

    wazuh wazuh
  • Medium 5.3
    CVE-2026-49392

    Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd

    Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile() and DB::searchFile() in src/syscheckd/src/db/src/file.cpp concatenate a monitored file path into SQLite row fi…

    wazuh wazuh

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-62574, EUVD-2026-62571, EUVD-2026-62564, EUVD-2026-62558, EUVD-2026-62557, EUVD-2026-62555, EUVD-2026-62554, EUVD-2026-62553, EUVD-2026-62577, EUVD-2026-62575

  2. #1

    Initiale Fassung

References