Product

Wazuh Dashboard (4.9.0 - 4.14.8)

1 brief RSS

Wazuh Dashboard: Authorization bypass in /api/request proxy (CVE-2026-112340)

An authorization bypass vulnerability in Wazuh dashboard versions 4.9.0 to 4.14.8 allows authenticated users to override Manager API Authorization headers via the /api/request endpoint.

Wazuh dashboard web-application vulnerability authentication-bypass privilege-escalation

1t 1c 18m ago