Skip to content
Threat Feed
Subscribe

Product

Wazuh (3.9.0 <= v < 4.14.8)

1 brief RSS
critical advisory

Arbitrary File Overwrite Vulnerability in Wazuh MasterHandler

Wazuh versions 3.9.0 through 4.14.7 are vulnerable to an arbitrary file overwrite attack in MasterHandler that allows cluster workers to gain root remote code execution by modifying critical configuration files.

Wazuh +6 privilege-escalation configuration-bypass cve-2026-74041 web-vulnerability path-traversal vulnerability authentication-bypass cve-2026-74035 +3
8t 1c