agentprime: wazuh

agentprime: wazuhEvery new CVE for wazuh.https://agentprime.io/CVE-2026-62365: Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XMLhttps://agentprime.io/advisories/CVE-2026-62365/https://agentprime.io/advisories/CVE-2026-62365/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:46:40 GMTCVECVE-2026-71540: Wazuh Manager cluster header parsing allows pre-authentication memory exhaustionhttps://agentprime.io/advisories/CVE-2026-71540/https://agentprime.io/advisories/CVE-2026-71540/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 17:49:29 GMTCVECVE-2026-61811: Wazuh: Unbounded Recursion in os_xml `_getattributes()` Causes analysisd Worker Thread Stack Exhaustionhttps://agentprime.io/advisories/CVE-2026-61811/https://agentprime.io/advisories/CVE-2026-61811/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 17:48:01 GMTCVECVE-2026-61802: Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/confighttps://agentprime.io/advisories/CVE-2026-61802/https://agentprime.io/advisories/CVE-2026-61802/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 23:31:30 GMTCVECVE-2026-61800: Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)https://agentprime.io/advisories/CVE-2026-61800/https://agentprime.io/advisories/CVE-2026-61800/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 23:26:28 GMTCVEcriticalCVE-2026-61783: Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.keyhttps://agentprime.io/advisories/CVE-2026-61783/https://agentprime.io/advisories/CVE-2026-61783/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 23:19:18 GMTCVECVE-2026-54084: Wazuh agent enrollment NULL pointer dereference via malformed manager responsehttps://agentprime.io/advisories/CVE-2026-54084/https://agentprime.io/advisories/CVE-2026-54084/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 23:12:20 GMTCVECVE-2026-54085: Wazuh: Missing input validation in multiple active response scripts allows argument injectionhttps://agentprime.io/advisories/CVE-2026-54085/https://agentprime.io/advisories/CVE-2026-54085/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 22:55:18 GMTCVECVE-2026-54083: Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletionhttps://agentprime.io/advisories/CVE-2026-54083/https://agentprime.io/advisories/CVE-2026-54083/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 22:45:37 GMTCVECVE-2026-49392: Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckdhttps://agentprime.io/advisories/CVE-2026-49392/https://agentprime.io/advisories/CVE-2026-49392/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:22:49 GMTCVECVE-2026-44256: Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Usernamehttps://agentprime.io/advisories/CVE-2026-44256/https://agentprime.io/advisories/CVE-2026-44256/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:21:49 GMTCVECVE-2026-45798: Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: fieldhttps://agentprime.io/advisories/CVE-2026-45798/https://agentprime.io/advisories/CVE-2026-45798/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:20:54 GMTCVECVE-2026-49441: Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh managerhttps://agentprime.io/advisories/CVE-2026-49441/https://agentprime.io/advisories/CVE-2026-49441/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:19:37 GMTCVEcriticalCVE-2026-41424: Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpointhttps://agentprime.io/advisories/CVE-2026-41424/https://agentprime.io/advisories/CVE-2026-41424/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:18:24 GMTCVECVE-2026-44255: Wazuh: Username Enumeration via Timing Side-Channelhttps://agentprime.io/advisories/CVE-2026-44255/https://agentprime.io/advisories/CVE-2026-44255/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:15:19 GMTCVECVE-2026-48024: Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh managerhttps://agentprime.io/advisories/CVE-2026-48024/https://agentprime.io/advisories/CVE-2026-48024/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:14:20 GMTCVEcriticalCVE-2026-48162: Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh managerhttps://agentprime.io/advisories/CVE-2026-48162/https://agentprime.io/advisories/CVE-2026-48162/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:13:15 GMTCVEcriticalCVE-2026-44901: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-44901/https://agentprime.io/advisories/CVE-2026-44901/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:12:12 GMTCVECVE-2026-44254: Wazuh: Stack Out-of-Bounds Write in remoted Decompression Pathhttps://agentprime.io/advisories/CVE-2026-44254/https://agentprime.io/advisories/CVE-2026-44254/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:09:55 GMTCVECVE-2026-46343: Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()https://agentprime.io/advisories/CVE-2026-46343/https://agentprime.io/advisories/CVE-2026-46343/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:07:58 GMTCVECVE-2026-44253: Wazuh: Cluster Protocol Memory Exhaustion (DoS) via unbounded receive_str allocation and div_msg_box accumulationhttps://agentprime.io/advisories/CVE-2026-44253/https://agentprime.io/advisories/CVE-2026-44253/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:06:06 GMTCVECVE-2026-44252: Wazuh Manager dapi RBAC Bypass Allows Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-44252/https://agentprime.io/advisories/CVE-2026-44252/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:04:00 GMTCVECVE-2026-67307: Wazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory Synchttps://agentprime.io/advisories/CVE-2026-67307/https://agentprime.io/advisories/CVE-2026-67307/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 12:22:18 GMTCVECVE-2026-67308: Wazuh GitHub Actions Shell Injection via Fork Pull Requesthttps://agentprime.io/advisories/CVE-2026-67308/https://agentprime.io/advisories/CVE-2026-67308/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 12:22:17 GMTCVEcriticalCVE-2026-28220: Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master nodehttps://agentprime.io/advisories/CVE-2026-28220/https://agentprime.io/advisories/CVE-2026-28220/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 15:26:13 GMTCVECVE-2026-44251: Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent messagehttps://agentprime.io/advisories/CVE-2026-44251/https://agentprime.io/advisories/CVE-2026-44251/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 00:01:41 GMTCVECVE-2026-40106: Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)https://agentprime.io/advisories/CVE-2026-40106/https://agentprime.io/advisories/CVE-2026-40106/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 23:57:16 GMTCVECVE-2026-39359: Wazuh: Unauthenticated Path Traversal in authd via Agent Group Namehttps://agentprime.io/advisories/CVE-2026-39359/https://agentprime.io/advisories/CVE-2026-39359/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 23:55:18 GMTCVECVE-2026-34150: Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsinghttps://agentprime.io/advisories/CVE-2026-34150/https://agentprime.io/advisories/CVE-2026-34150/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 23:44:42 GMTCVECVE-2026-33754: Wazuh: Unauthenticated cluster packet length leads to uncontrolled memory allocation (remote DoS)https://agentprime.io/advisories/CVE-2026-33754/https://agentprime.io/advisories/CVE-2026-33754/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 23:40:59 GMTCVECVE-2026-33434: Wazuh: Rate Limit Bypass via /events Endpointhttps://agentprime.io/advisories/CVE-2026-33434/https://agentprime.io/advisories/CVE-2026-33434/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Jul 2026 23:36:33 GMTCVECVE-2026-41499: Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()https://agentprime.io/advisories/CVE-2026-41499/https://agentprime.io/advisories/CVE-2026-41499/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Apr 2026 18:01:25 GMTCVECVE-2026-30893: Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peerhttps://agentprime.io/advisories/CVE-2026-30893/https://agentprime.io/advisories/CVE-2026-30893/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Apr 2026 17:55:12 GMTCVEcriticalCVE-2026-28221: Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64https://agentprime.io/advisories/CVE-2026-28221/https://agentprime.io/advisories/CVE-2026-28221/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Apr 2026 17:53:15 GMTCVECVE-2026-26206: Wazuh: API brute-force protection bypass via race condition in login attempt trackinghttps://agentprime.io/advisories/CVE-2026-26206/https://agentprime.io/advisories/CVE-2026-26206/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Apr 2026 17:49:15 GMTCVECVE-2026-26204: Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertDatahttps://agentprime.io/advisories/CVE-2026-26204/https://agentprime.io/advisories/CVE-2026-26204/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Apr 2026 17:43:44 GMTCVECVE-2023-7340: Wazuh authd service (os_auth) Heap-based Buffer Overflowhttps://agentprime.io/advisories/CVE-2023-7340/https://agentprime.io/advisories/CVE-2023-7340/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 15:52:47 GMTCVECVE-2026-32984: Heap buffer overflow in wazuh-authdhttps://agentprime.io/advisories/CVE-2026-32984/https://agentprime.io/advisories/CVE-2026-32984/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 15:02:47 GMTCVECVE-2026-25790: Wazuh has Stack-Based Buffer Overflow in Security Configuration Assessment JSON Parserhttps://agentprime.io/advisories/CVE-2026-25790/https://agentprime.io/advisories/CVE-2026-25790/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 18:41:45 GMTCVECVE-2026-25772: Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflowhttps://agentprime.io/advisories/CVE-2026-25772/https://agentprime.io/advisories/CVE-2026-25772/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 18:11:05 GMTCVECVE-2026-25771: Wazuh Vulnerable to Denial of Service via Synchronous I/O Blocking in Asynchronous Authentication Middlewarehttps://agentprime.io/advisories/CVE-2026-25771/https://agentprime.io/advisories/CVE-2026-25771/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 18:08:53 GMTCVECVE-2026-25770: Wazuh has Privilege Escalation to Root via Cluster Protocol File Writehttps://agentprime.io/advisories/CVE-2026-25770/https://agentprime.io/advisories/CVE-2026-25770/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 18:02:07 GMTCVEcriticalCVE-2026-25769: Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserializationhttps://agentprime.io/advisories/CVE-2026-25769/https://agentprime.io/advisories/CVE-2026-25769/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 17:41:08 GMTCVEcriticalCVE-2025-64169: Wazuh NULL pointer dereference in fim_alert line 666https://agentprime.io/advisories/CVE-2025-64169/https://agentprime.io/advisories/CVE-2025-64169/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 18:39:02 GMTCVECVE-2025-54866: Wazuh installation fails to protected authd.pass on Windowshttps://agentprime.io/advisories/CVE-2025-54866/https://agentprime.io/advisories/CVE-2025-54866/CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 18:23:49 GMTCVECVE-2025-30201: Wazuh NetNTLMv2 Hash Theft In Multiple Centralized Configuration Capabilitieshttps://agentprime.io/advisories/CVE-2025-30201/https://agentprime.io/advisories/CVE-2025-30201/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 18:17:37 GMTCVECVE-2025-62792: Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_matchhttps://agentprime.io/advisories/CVE-2025-62792/https://agentprime.io/advisories/CVE-2025-62792/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Oct 2025 16:50:05 GMTCVECVE-2025-62791: Wazuh vulnerable to NULL pointer dereference in DecodeCiscathttps://agentprime.io/advisories/CVE-2025-62791/https://agentprime.io/advisories/CVE-2025-62791/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Oct 2025 16:48:25 GMTCVECVE-2025-62790: Wazuh vulnerable to NULL pointer dereference in fim_fetch_attributes_statehttps://agentprime.io/advisories/CVE-2025-62790/https://agentprime.io/advisories/CVE-2025-62790/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Oct 2025 16:46:31 GMTCVECVE-2025-62789: Wazuh vulnerable to NULL pointer dereference in fim_alert line 712https://agentprime.io/advisories/CVE-2025-62789/https://agentprime.io/advisories/CVE-2025-62789/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Oct 2025 16:44:30 GMTCVE