WA
Product
wazuh-manager
21
CVEs
0
On KEV
9.1
Max CVSS
14
New 30D
Severity mix
Critical 2High 9Medium 10Low 0
Watch
Add wazuh-manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-74047 | 6.5 | Oct 13 | Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint Affected: 4.0.0 before 4.14.8 |
| CVE-2026-74031 | 6.5 | Oct 13 | Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helpers Affected: 4.1.1 before 4.14.8 |
| CVE-2026-74044 | 6.5 | Aug 18 | Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello Affected: 4.0.0 before 4.14.6 |
| CVE-2026-74039 | 6.5 | Aug 18 | Wazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_context Affected: 4.0.0 before 4.14.7; 5.0.0-beta2 |
| CVE-2026-74033 | 6.1 | Oct 13 | Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlers Affected: 4.1.1 before 4.14.8 |
| CVE-2026-93346 | 5.3 | Oct 13 | Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Condition Affected: 4.0.0 before 4.14.8 |
| CVE-2026-93347 | 4.9 | Oct 13 | Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file Affected: 4.1.1 before 4.14.8 |
| CVE-2026-74030 | 4.9 | Oct 13 | Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansion Affected: 3.9.0 before 4.14.8 |
| CVE-2026-74046 | 4.9 | Aug 18 | Wazuh 4.4.0 < 4.14.7 DoS via fdecompress_files() Zip Bomb Affected: 4.4.0 before 4.14.7 |
| CVE-2026-74032 | 4.3 | Oct 13 | Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actions Affected: 4.0.0 before 4.14.8 |
Showing 10