Browse CVEs

CRITICAL 9.1 CVE-2026-28220 Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distribu… Wazuh 4.14.5+ Fix from $2,3002026-07-20 HIGH 7.8 CVE-2026-40106 Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap… Wazuh 4.14.5+ Fix from $1,9502026-07-17 MEDIUM 6.5 CVE-2026-44251 Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t … Wazuh 4.14.5+ Fix from $1,6002026-07-17 HIGH 7.5 CVE-2026-34150 Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap bu… Wazuh 4.14.5+ Fix from $1,9502026-07-17 HIGH 7.5 CVE-2026-39359 Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.0.0 through 4.10.3 and 4.11.0 through 4.1… Wazuh 4.10.4 / 4.14.5+ Fix from $1,9502026-07-17 MEDIUM 6.5 CVE-2026-33754 Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.9.0 and above, prior to 4.14.5, a remote … Wazuh 4.14.5+ Fix from $1,6002026-07-17 HIGH 7.1 CVE-2026-33434 Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and above, prior to 4.14.5, a logic e… Wazuh 4.14.5+ Fix from $1,9502026-07-17 MEDIUM 6.5 CVE-2026-56401 Wazuh wazuh-modulesd before 5.0.0-beta3 contains a null pointer dereference vulnerability in inventory_sync FlatBuffer DataValue handling. An enrolle… Wazuh 5.0.0+ Fix from $1,6002026-07-08 CRITICAL 9.9 CVE-2026-30893 Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path tra… Wazuh 4.14.4+ Fix from $2,3002026-04-29 HIGH 8.2 CVE-2026-28221 Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-ba… Wazuh 4.14.4+ Fix from $1,9502026-04-29 MEDIUM 6.5 CVE-2026-41499 Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, multiple h… Wazuh 4.14.4+ Fix from $1,6002026-04-29 MEDIUM 6.5 CVE-2026-26206 Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, Wazuh's se… Wazuh 4.14.4+ Fix from $1,6002026-04-29 MEDIUM 5.5 CVE-2026-26204 Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-bas… Wazuh 4.14.4+ Fix from $1,6002026-04-29 HIGH 8.1 CVE-2025-15612 Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling S… Wazuh 4.14.0+ Fix from $1,9502026-03-27 HIGH 8.1 CVE-2025-15617 Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from u… Wazuh No fix yet Fix from $1,9502026-03-27 HIGH 7.5 CVE-2025-15615 Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiatio… Wazuh 4.8.0+ Fix from $1,9502026-03-27 HIGH 7.2 CVE-2025-15616 Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow… Wazuh 4.8.0+ Fix from $1,9502026-03-27 HIGH 7.5 CVE-2026-32983 Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiatio… Wazuh after 4.7.3 Fix from $1,9502026-03-27 HIGH 7.5 CVE-2026-25771 Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.3.0 and prior to version 4.14.3, … Wazuh 4.14.3+ Fix from $1,9502026-03-17 HIGH 7.2 CVE-2026-25772 Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, … Wazuh 4.14.3+ Fix from $1,9502026-03-17 HIGH 7.2 CVE-2026-25790 Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, … Wazuh 4.14.3+ Fix from $1,9502026-03-17 CRITICAL 9.1 CVE-2026-25769EPSS 9% Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execut… Wazuh 4.14.3+ Fix from $2,3002026-03-17 HIGH 7.2 CVE-2026-25770 Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 3.9.0 and prior to version 4.14.3, … Wazuh 4.14.3+ Fix from $1,9502026-03-17 MEDIUM 5.5 CVE-2025-54866 Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.3.0 to before 4.13.0, a missing ACL on "… Wazuh 4.13.0+ Fix from $1,6002025-11-21 CRITICAL 9.1 CVE-2025-30201 Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.13.0, a vulnerability in Wazuh Agent… Wazuh 4.13.0+ Fix from $2,3002025-11-21 HIGH 7.5 CVE-2025-62791 Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, DecodeCiscat() implementation does not… Wazuh 4.11.0+ Fix from $1,9502025-10-29 HIGH 7.5 CVE-2025-62792 Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in w_express… Wazuh 4.12.0+ Fix from $1,9502025-10-29 HIGH 7.5 CVE-2025-62787 Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.10.2, a buffer over-read occurs in DecodeWin… Wazuh 4.10.2+ Fix from $1,9502025-10-29 HIGH 7.5 CVE-2025-62788 Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, w_copy_event_for_log() references memo… Wazuh 4.11.0+ Fix from $1,9502025-10-29 HIGH 7.5 CVE-2025-62789 Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_alert() implementation does not ch… Wazuh 4.11.0+ Fix from $1,9502025-10-29