wazuh vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20244
3. 202517
4. 202667

Known exploitedNewest addition to KEV first

• CVE-2025-24016

  Remote code execution in Wazuh server

  wazuh · wazuh

  ExploitedCritical9.9

Newest CVEs

• CVE-2026-62365

  Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XML

  wazuh · wazuh

  Medium5.3
• CVE-2026-93347

  Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file

  Wazuh · wazuh-manager

  Medium6.9
• CVE-2026-93346

  Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Condition

  Wazuh · wazuh-manager

  Medium6.9
• CVE-2026-74047

  Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint

  Wazuh · wazuh-manager

  High7.1
• CVE-2026-74045

  Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder

  Wazuh · wazuh-manager

  High7.1
• CVE-2026-74043

  Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functions

  Wazuh · wazuh-manager

  High8.5
• CVE-2026-74041

  Wazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case Mismatch

  Wazuh · wazuh-manager

  High8.6
• CVE-2026-74040

  Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker

  Wazuh · wazuh-manager

  Critical9.4
• CVE-2026-74037

  Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_token

  Wazuh · wazuh-manager

  High8.6
• CVE-2026-74036

  Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policies

  Wazuh · wazuh-agent

  High8.6