Browse CVEs

HIGH 7.5 CVE-2025-62790 Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fim_fetch_attributes_state() implement… Wazuh 4.11.0+ Fix from $1,9502025-10-29 HIGH 8.1 CVE-2025-62786 Wazuh is a free and open source platform used for threat prevention, detection, and response. A heap-based out-of-bounds WRITE occurs in decode_win_p… Wazuh 4.10.2+ Fix from $1,9502025-10-29 HIGH 7.5 CVE-2025-62785 Wazuh is a free and open source platform used for threat prevention, detection, and response. fillData() implementation does not check whether value … Wazuh 4.10.2+ Fix from $1,9502025-10-29 MEDIUM 6.5 CVE-2025-59938 Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh… Wazuh 4.11.0+ Fix from $1,6002025-09-27 HIGH 7.2 CVE-2024-1243 Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to… Wazuh 4.8.0+ Fix from $1,9502025-06-11 CRITICAL 9.9 CVE-2025-24016 KEVEPSS 94% Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, a… Wazuh 4.9.1+ Fix from $2,3002025-02-10 HIGH 8.0 CVE-2024-47770 Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premise… Wazuh 4.9.1+ Fix from $1,9502025-02-03 HIGH 7.8 CVE-2024-35177 Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premise… Wazuh 4.9.0+ Fix from $1,9502025-02-03 CRITICAL 9.8 CVE-2024-32038 Wazuh is a free and open source platform used for threat prevention, detection, and response. There is a buffer overflow hazard in wazuh-analysisd wh… Wazuh 4.7.2+ Fix from $2,3002024-04-19 HIGH 8.8 CVE-2023-50260EPSS 41% Wazuh is a free and open source platform used for threat prevention, detection, and response. A wrong validation in the `host_deny` script allows to … Wazuh 4.7.2+ Fix from $1,9502024-04-19 MEDIUM 6.5 CVE-2023-49275 Wazuh is a free and open source platform used for threat prevention, detection, and response. A NULL pointer dereference was detected during fuzzing … Wazuh 4.7.1+ Fix from $1,6002024-04-19 HIGH 7.8 CVE-2023-42463 Wazuh is a free and open source platform used for threat prevention, detection, and response. This bug introduced a stack overflow hazard that could … Wazuh 4.5.3+ Fix from $1,9502024-01-12 HIGH 8.8 CVE-2023-42455 Wazuh is a security detection, visibility, and compliance open source project. In versions 4.4.0 and 4.4.1, it is possible to get the Wazuh API admin… Wazuh Dashboard 4.4.2+ Fix from $1,9502023-10-09 HIGH 8.8 CVE-2022-40497 Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability vi… Wazuh after 4.3.7 Fix from $1,9502022-09-28 CRITICAL 9.8 CVE-2021-44079 In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting… Wazuh 4.2.5+ Fix from $2,3002021-11-22 MEDIUM 6.5 CVE-2021-41821 Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service. A crafted message … Wazuh after 4.1.5 Fix from $1,6002021-09-29 HIGH 8.8 CVE-2021-26814EPSS 9% Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An… Wazuh after 4.0.3 Fix from $1,9502021-03-06