WA
Product
wazuh-manager
21
CVEs
0
On KEV
9.1
Max CVSS
14
New 30D
Severity mix
Critical 2High 9Medium 10Low 0
Watch
Add wazuh-manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-74034 | 7.5 | Oct 13 | Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Command Affected: 4.1.0 before 4.14.8 |
| CVE-2025-15615 | 7.5 | Mar 27 | Wazuh Manager authd service Improper SSL/TLS Renegotiation Handling leading to Denial of Service Affected: <= 4.7.3; <= 4.7.3 |
| CVE-2026-32983 | 7.5 | Mar 27 | SSL/TLS Renegotiation DoS in Wazuh Manager authd service Affected: through 4.7.3 |
| CVE-2026-74041 | 7.2 | Oct 13 | Wazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case Mismatch Affected: 4.14.3 before 4.14.8; 4.10.4 before 4.10.5 |
| CVE-2026-74037 | 7.2 | Oct 13 | Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_token Affected: 4.0.0 before 4.14.8 |
| CVE-2026-74035 | 7.2 | Oct 13 | Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_user Affected: 4.6.0 before 4.14.8 |
| CVE-2025-15616 | 7.2 | Mar 27 | Wazuh Agent and Manager OS Command Injection and Untrusted Search Path Affected: 2.1.0 before 4.8.0 |
| CVE-2026-74045 | 7.1 | Oct 13 | Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder Affected: 3.12.0 before 4.14.8 |
| CVE-2026-74038 | 7.1 | Aug 18 | Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment Affected: 4.0.0 before 4.14.6 |
Showing 9