Skip to content
Threat Feed
Subscribe

Vendor

Wazuh

4 briefs RSS
critical advisory

Wazuh GitHub Actions Shell Injection Vulnerability

A shell injection vulnerability in Wazuh workflows allows unauthenticated attackers to execute arbitrary commands and exfiltrate secrets via malicious pull requests containing crafted VERSION.json files.

Wazuh supply-chain ci-cd code-injection
3t 1c
critical advisory

Wazuh Manager Vulnerability CVE-2026-56699 Allows NDJSON Injection

Wazuh Manager versions prior to 5.0.0-beta3 are critically vulnerable to an injection flaw, CVE-2026-56699 (CWE-74), enabling enrolled agents to inject arbitrary NDJSON operations into OpenSearch bulk requests, leading to data integrity compromise and defense evasion.

Wazuh Manager vulnerability injection SIEM Wazuh
2t 1c
medium advisory

Wazuh Denial of Service Vulnerability

A vulnerability in Wazuh allows a remote, authenticated attacker to perform a denial of service attack, which could disrupt the availability of the Wazuh platform.

Wazuh denial-of-service vulnerability
1t
critical advisory

Multiple Vulnerabilities in Wazuh Allow for Code Execution and Data Manipulation

Multiple vulnerabilities in Wazuh allow an attacker to perform a denial of service attack, execute arbitrary code, manipulate data, disclose confidential information, or bypass security measures.

Wazuh vulnerability siem xdr
2r 6t 5c