Advisories · Technology
wazuh-agent.
Every CVE that names wazuh-agent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policies
- wazuh-agent
- Broken access control
- CVSS 6.9 Medium
Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansion
- wazuh-agent
- wazuh-manager
- Denial of service
- CVSS 7.1 High
Wazuh Agent and Manager OS Command Injection and Untrusted Search Path
- wazuh-agent
- wazuh-manager
- Code injection
- CVSS 9.5 CriticalCritical · CVSS 9+
Remote code execution and local privilege escalation in Wazuh Windows agent via NetNTLMv2 hash theft
- Wazuh Agent
- Path traversal
- CWE-20