Skip to content
OpenAdvisories

Vendor

wazuh

97 known vulnerabilities.

Products

wazuh 69 wazuh-manager 21 wazuh-agent 4 wazuh-dashboard-plugins 2 wazuh-kibana-app 1 Wazuh Provisioning Scripts (Agent Build Environment) 1 Wazuh (GitHub Actions) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-74034 Public exploit

    Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Command

    Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with attacker-controlled file_path. Attackers can inject an upgrade_custom message over the agent channel to read a…

    wazuh wazuh-manager