wazuh.

Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XML

• wazuh
• Memory corruption

Wazuh Manager cluster header parsing allows pre-authentication memory exhaustion

• wazuh
• Denial of service

Wazuh: Unbounded Recursion in os_xml `_getattributes()` Causes analysisd Worker Thread Stack Exhaustion

• wazuh
• Denial of service

Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config

• wazuh
• Information disclosure
• Hard-coded credentials

Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)

• wazuh
• Path traversal

Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key

• wazuh
• Information disclosure
• Broken access control

Wazuh agent enrollment NULL pointer dereference via malformed manager response

• wazuh
• Memory corruption

Wazuh: Missing input validation in multiple active response scripts allows argument injection

• wazuh
• Command injection

Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion

• wazuh
• Path traversal

Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd

• wazuh
• SQL injection
• CWE-20

Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username

• wazuh
• Other injection

Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: field

• wazuh
• Memory corruption
• CWE-170

Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh manager

• wazuh
• Path traversal

Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpoint

• wazuh
• Broken access control

Wazuh: Username Enumeration via Timing Side-Channel

• wazuh
• CWE-208

Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager

• wazuh
• Path traversal

Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh manager

• wazuh
• Path traversal

Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

• wazuh
• Insecure deserialization

Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path

• wazuh
• Memory corruption

Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()

• wazuh
• Path traversal

Wazuh: Cluster Protocol Memory Exhaustion (DoS) via unbounded receive_str allocation and div_msg_box accumulation

• wazuh
• Denial of service

Wazuh Manager dapi RBAC Bypass Allows Privilege Escalation

• wazuh
• Broken access control

Wazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory Sync

• wazuh
• CWE-345

Wazuh GitHub Actions Shell Injection via Fork Pull Request

• wazuh
• Command injection

Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node

• wazuh
• Insecure deserialization

Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message

• wazuh
• Memory corruption

Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)

• wazuh
• Memory corruption

Wazuh: Unauthenticated Path Traversal in authd via Agent Group Name

• wazuh
• Path traversal

Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing

• wazuh
• Memory corruption

Wazuh: Unauthenticated cluster packet length leads to uncontrolled memory allocation (remote DoS)

• wazuh
• Denial of service

Wazuh: Rate Limit Bypass via /events Endpoint

• wazuh
• CWE-799

Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()

• wazuh
• Memory corruption

Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peer

• wazuh
• Path traversal

Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64

• wazuh
• Memory corruption
• Denial of service

Wazuh: API brute-force protection bypass via race condition in login attempt tracking

• wazuh
• Authentication bypass
• Race condition

Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData

• wazuh
• Memory corruption

Wazuh authd service (os_auth) Heap-based Buffer Overflow

• Wazuh
• Memory corruption

Heap buffer overflow in wazuh-authd

• Wazuh
• Memory corruption

Wazuh has Stack-Based Buffer Overflow in Security Configuration Assessment JSON Parser

• wazuh
• Memory corruption

Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow

• wazuh
• Memory corruption

Wazuh Vulnerable to Denial of Service via Synchronous I/O Blocking in Asynchronous Authentication Middleware

• wazuh
• Denial of service

Wazuh has Privilege Escalation to Root via Cluster Protocol File Write

• wazuh
• Path traversal
• Privilege escalation

Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization

• wazuh
• Insecure deserialization

Wazuh NULL pointer dereference in fim_alert line 666

• wazuh
• Memory corruption
• CWE-252

Wazuh installation fails to protected authd.pass on Windows

• wazuh
• Broken access control

Wazuh NetNTLMv2 Hash Theft In Multiple Centralized Configuration Capabilities

• wazuh
• Path traversal
• Authentication bypass

Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_match

• wazuh
• CWE-126
• CWE-170

Wazuh vulnerable to NULL pointer dereference in DecodeCiscat

• wazuh
• Memory corruption
• CWE-252

Wazuh vulnerable to NULL pointer dereference in fim_fetch_attributes_state

• wazuh
• Memory corruption
• CWE-252

Wazuh vulnerable to NULL pointer dereference in fim_alert line 712

• wazuh
• Memory corruption
• CWE-252

Wazuh Vulnerable to Heap Use After Free in w_copy_event_for_log

• wazuh
• Memory corruption

Wazuh Vulnerable to Heap-based Buffer Over-read in DecodeWinevt

• wazuh
• CWE-126

Wazuh Vulnerable to Heap-based Buffer Out-Of-Bounds WRITE in decode_win_permissions

• wazuh
• Memory corruption

Wazuh fillData NULL pointer dereference causes analysisd crash

• wazuh
• Memory corruption
• CWE-252

Heap buffer overflow in wazuh-analysisd

• wazuh
• Memory corruption

Wazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability

• wazuh
• Memory corruption

Wazuh's vulnerability in host_deny AR script allows arbitrary command execution

• wazuh
• Code injection

Wazuh vulnerable to NULL Pointer Dereference in wazuh-analysisd

• wazuh
• Memory corruption

wazuh-logcollector integer underflow local privilege escalation

• wazuh
• Memory corruption