Skip to content
OpenAdvisories

Product · wazuh

wazuh-dashboard-plugins

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-112340

    Wazuh 4.9.0 before 4.14.9 Authorization Header Override via /api/request

    Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows authenticated dashboard users to override the Manager API Authorization header via the /api/request proxy endpoint. Attackers can supply nested body.hea…

    wazuh wazuh-dashboard-plugins