agentprime: wazuh-managerEvery new CVE for wazuh-manager.https://agentprime.io/CVE-2026-93347: Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_filehttps://agentprime.io/advisories/CVE-2026-93347/https://agentprime.io/advisories/CVE-2026-93347/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:34 GMTCVECVE-2026-93346: Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Conditionhttps://agentprime.io/advisories/CVE-2026-93346/https://agentprime.io/advisories/CVE-2026-93346/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:33 GMTCVECVE-2026-74047: Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpointhttps://agentprime.io/advisories/CVE-2026-74047/https://agentprime.io/advisories/CVE-2026-74047/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:33 GMTCVECVE-2026-74045: Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoderhttps://agentprime.io/advisories/CVE-2026-74045/https://agentprime.io/advisories/CVE-2026-74045/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:32 GMTCVECVE-2026-74043: Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functionshttps://agentprime.io/advisories/CVE-2026-74043/https://agentprime.io/advisories/CVE-2026-74043/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:31 GMTCVECVE-2026-74041: Wazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case Mismatchhttps://agentprime.io/advisories/CVE-2026-74041/https://agentprime.io/advisories/CVE-2026-74041/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:31 GMTCVECVE-2026-74040: Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_workerhttps://agentprime.io/advisories/CVE-2026-74040/https://agentprime.io/advisories/CVE-2026-74040/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:30 GMTCVEcriticalCVE-2026-74037: Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_tokenhttps://agentprime.io/advisories/CVE-2026-74037/https://agentprime.io/advisories/CVE-2026-74037/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:29 GMTCVECVE-2026-74035: Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_userhttps://agentprime.io/advisories/CVE-2026-74035/https://agentprime.io/advisories/CVE-2026-74035/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:28 GMTCVECVE-2026-74034: Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Commandhttps://agentprime.io/advisories/CVE-2026-74034/https://agentprime.io/advisories/CVE-2026-74034/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:28 GMTCVECVE-2026-74033: Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlershttps://agentprime.io/advisories/CVE-2026-74033/https://agentprime.io/advisories/CVE-2026-74033/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:27 GMTCVECVE-2026-74032: Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actionshttps://agentprime.io/advisories/CVE-2026-74032/https://agentprime.io/advisories/CVE-2026-74032/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:26 GMTCVECVE-2026-74031: Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helpershttps://agentprime.io/advisories/CVE-2026-74031/https://agentprime.io/advisories/CVE-2026-74031/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:26 GMTCVECVE-2026-74030: Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansionhttps://agentprime.io/advisories/CVE-2026-74030/https://agentprime.io/advisories/CVE-2026-74030/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:25 GMTCVECVE-2026-74046: Wazuh 4.4.0 < 4.14.7 DoS via fdecompress_files() Zip Bombhttps://agentprime.io/advisories/CVE-2026-74046/https://agentprime.io/advisories/CVE-2026-74046/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 17:27:24 GMTCVECVE-2026-74044: Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hellohttps://agentprime.io/advisories/CVE-2026-74044/https://agentprime.io/advisories/CVE-2026-74044/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 17:26:50 GMTCVECVE-2026-74039: Wazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_contexthttps://agentprime.io/advisories/CVE-2026-74039/https://agentprime.io/advisories/CVE-2026-74039/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 17:26:12 GMTCVECVE-2026-74038: Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollmenthttps://agentprime.io/advisories/CVE-2026-74038/https://agentprime.io/advisories/CVE-2026-74038/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 17:25:08 GMTCVECVE-2025-15616: Wazuh Agent and Manager OS Command Injection and Untrusted Search Pathhttps://agentprime.io/advisories/CVE-2025-15616/https://agentprime.io/advisories/CVE-2025-15616/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 16:38:20 GMTCVECVE-2025-15615: Wazuh Manager authd service Improper SSL/TLS Renegotiation Handling leading to Denial of Servicehttps://agentprime.io/advisories/CVE-2025-15615/https://agentprime.io/advisories/CVE-2025-15615/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 16:23:03 GMTCVECVE-2026-32983: SSL/TLS Renegotiation DoS in Wazuh Manager authd servicehttps://agentprime.io/advisories/CVE-2026-32983/https://agentprime.io/advisories/CVE-2026-32983/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 15:44:30 GMTCVE