Skip to content
Threat Feed
Subscribe

Product

Wazuh

4 briefs RSS
high advisory

Path Traversal Vulnerability in Wazuh Agent Enrollment

A path traversal vulnerability in Wazuh versions 4.0.0 through 4.14.5 allows unauthenticated remote attackers to trigger a denial of service by sending a specially crafted agent enrollment request.

Wazuh
1c
critical advisory

Wazuh GitHub Actions Shell Injection Vulnerability

A shell injection vulnerability in Wazuh workflows allows unauthenticated attackers to execute arbitrary commands and exfiltrate secrets via malicious pull requests containing crafted VERSION.json files.

Wazuh supply-chain ci-cd code-injection
3t 1c
medium advisory

Wazuh Denial of Service Vulnerability

A vulnerability in Wazuh allows a remote, authenticated attacker to perform a denial of service attack, which could disrupt the availability of the Wazuh platform.

Wazuh denial-of-service vulnerability
1t
critical advisory

Multiple Vulnerabilities in Wazuh Allow for Code Execution and Data Manipulation

Multiple vulnerabilities in Wazuh allow an attacker to perform a denial of service attack, execute arbitrary code, manipulate data, disclose confidential information, or bypass security measures.

Wazuh vulnerability siem xdr
2r 6t 5c