Skip to contentWazuh Wazuh-manager vulnerabilities
- wazuh wazuh-managerWazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_fileCVE-2026-933476.9 Medium
- wazuh wazuh-managerWazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race ConditionCVE-2026-933466.9 Medium
- wazuh wazuh-managerWazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config EndpointCVE-2026-740477.1 High
- wazuh wazuh-managerWazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM DecoderCVE-2026-740457.1 High
- wazuh wazuh-managerWazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload FunctionsCVE-2026-740438.5 High
- wazuh wazuh-managerWazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case MismatchCVE-2026-740418.6 High
- wazuh wazuh-managerWazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_workerCVE-2026-740409.4 Critical
- wazuh wazuh-managerWazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_tokenCVE-2026-740378.6 High
- wazuh wazuh-managerWazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_userCVE-2026-740358.6 High
- wazuh wazuh-managerWazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom CommandCVE-2026-74034Public exploit8.7 High
- wazuh wazuh-managerWazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster HandlersCVE-2026-740338.4 High
- wazuh wazuh-managerWazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actionsCVE-2026-740325.3 Medium
- wazuh wazuh-managerWazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete HelpersCVE-2026-740317.0 High
- wazuh wazuh-agent, wazuh-manager +1 moreWazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias ExpansionCVE-2026-740306.9 Medium
- wazuh, wazuh wazuh-manager +1 moreWazuh 4.4.0 < 4.14.7 DoS via fdecompress_files() Zip BombCVE-2026-740466.9 Medium
- wazuh, wazuh wazuh-manager +1 moreWazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster HelloCVE-2026-740447.0 High
- wazuh, wazuh wazuh-manager +1 moreWazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_contextCVE-2026-740397.1 High
- wazuh, wazuh wazuh-manager +1 moreWazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent EnrollmentCVE-2026-740387.0 High
- wazuh, wazuh wazuh-agent, wazuh-manager +2 moreWazuh Agent and Manager OS Command Injection and Untrusted Search PathCVE-2025-156167.1 High
- wazuh, wazuh wazuh-manager +1 moreWazuh Manager authd service Improper SSL/TLS Renegotiation Handling leading to Denial of ServiceCVE-2025-156156.9 Medium
- wazuh, wazuh wazuh-manager +1 moreSSL/TLS Renegotiation DoS in Wazuh Manager authd serviceCVE-2026-329836.9 Medium