Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment

Wazuh: Rate Limit Bypass via /events Endpoint

Wazuh: Unbounded Recursion in os_xml `_getattributes()` Causes analysisd Worker Thread Stack Exhaustion

Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config

Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key

Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello

Wazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_context

Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message

Wazuh: Unauthenticated cluster packet length leads to uncontrolled memory allocation (remote DoS)

Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()

Wazuh: API brute-force protection bypass via race condition in login attempt tracking

Heap buffer overflow in wazuh-analysisd

Wazuh is a free and open source platform used for threat prevention, detection, and response

Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service

Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData

Wazuh installation fails to protected authd.pass on Windows

Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd

Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username

Wazuh: Username Enumeration via Timing Side-Channel

Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path

Wazuh: Cluster Protocol Memory Exhaustion (DoS) via unbounded receive_str allocation and div_msg_box accumulation

Wazuh 4.4.0 < 4.14.7 DoS via fdecompress_files() Zip Bomb

Wazuh NULL pointer dereference in fim_alert line 666

Wazuh authd service (os_auth) Heap-based Buffer Overflow

Heap buffer overflow in wazuh-authd