Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-74030

Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansion

Wazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2json_node that allows a manager-controlled policy to exhaust agent memory. Attackers controlling the manager can push a small SCA policy with nested aliases via merged.mg to OOM-kill wazuh-modulesd on every agent in a group.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Wazuh
Products
Wazuh Wazuh-agent Wazuh-manager
CVE-2026-74036

Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policies

Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration source. Attackers controlling a manager can write unsigned policy files to var/incoming via the upgrade channel and reference them to execute command checks as root on agents.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Wazuh
Products
Wazuh Wazuh-agent
CVE-2025-15616

Wazuh Agent and Manager OS Command Injection and Untrusted Search Path

Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary commands through various components including logcollector configuration, maild SMTP server tags, and Kaspersky AR script parameters. Attackers can exploit these vulnerabilities by injecting malicious commands through configuration files, SMTP server settings, and custom flags to achieve remote code execution on affected systems.

CVSS 4.0 · 7.1 High EPSS 1.7% KEV · Not listed
Vendors
Wazuh
Products
Wazuh Wazuh-agent Wazuh-manager