wazuh vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20244
3. 202517
4. 202675

Known exploitedNewest addition to KEV first

• CVE-2025-24016

  Remote code execution in Wazuh server

  wazuh · wazuh

  ExploitedCritical9.9

Newest CVEs

• CVE-2026-112341

  Wazuh before 4.14.9 SQL Injection via WazuhDBBackend _substitute_params

  wazuh · wazuh

  High7.1
• CVE-2026-112340

  Wazuh 4.9.0 before 4.14.9 Authorization Header Override via /api/request

  wazuh · wazuh-dashboard-plugins

  High8.8
• CVE-2026-112339

  Wazuh 3.9.0 before 4.14.9 Missing TLS Hostname Verification in fluent-forward Module

  wazuh · wazuh

  High8.2
• CVE-2026-112338

  Wazuh from 4.3.0 before 4.14.9 SSRF via GitHub Module Link Pagination

  wazuh · wazuh

  High8.2
• CVE-2026-112337

  Wazuh 3.7.0 before 4.14.9 SSRF via Azure Graph nextLink Pagination

  wazuh · wazuh

  Medium6.3
• CVE-2026-112336

  Wazuh Manager 3.0.0 before 4.14.9 Memory Leak DoS via JSON Decoder

  wazuh · wazuh

  High7.1
• CVE-2026-112335

  Wazuh Agent 1.0.0 before 4.14.9 Stack Buffer Overflow via read_snortfull

  wazuh · wazuh

  Medium6.8
• CVE-2026-112334

  Wazuh 1.0.0 before 4.14.9 Out-of-Bounds Write in wazuh-execd via ar.conf

  wazuh · wazuh

  Medium6.9
• CVE-2026-62365

  Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XML

  wazuh · wazuh

  Medium5.3
• CVE-2026-93347

  Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file

  Wazuh · wazuh-manager

  Medium6.9