CPE
An authorization bypass vulnerability in Wazuh dashboard versions 4.9.0 to 4.14.8 allows authenticated users to override Manager API Authorization headers via the /api/request endpoint.