Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-28220 |
|
Unsafe Deserialization in wazuh (CVE-2026-28220)
vulnerability in wazuh (CVE-2026-28220). Successful exploitation can lead to full system takeover. Exploitable via ``ALLOWED_CALLABLES_PACKAGES``.
|
| CVE-2026-40106 |
|
Vulnerability in privilege-escalation (CVE-2026-40106)
vulnerability in privilege-escalation (CVE-2026-40106). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44251 |
|
Vulnerability in c (CVE-2026-44251)
vulnerability in c (CVE-2026-44251). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33754 |
|
Vulnerability in dos (CVE-2026-33754)
vulnerability in dos (CVE-2026-33754). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34150 |
|
Vulnerability in wazuh (CVE-2026-34150)
vulnerability in wazuh (CVE-2026-34150). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39359 |
|
Path Traversal in path-traversal (CVE-2026-39359)
path traversal in path-traversal (CVE-2026-39359). Confidential information can be exposed externally.
|
| CVE-2026-33434 |
|
Vulnerability in wazuh (CVE-2026-33434)
vulnerability in wazuh (CVE-2026-33434). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56401 |
|
Vulnerability in dos (CVE-2026-56401)
vulnerability in dos (CVE-2026-56401). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32983 |
|
Vulnerability in dos (CVE-2026-32983)
vulnerability in dos (CVE-2026-32983). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32984 |
|
Out-of-Bounds Read in dos (CVE-2026-32984)
vulnerability in dos (CVE-2026-32984). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-24016 KEV |
|
[KEV] Unsafe Deserialization in wazuh (CVE-2025-24016)
vulnerability in wazuh (CVE-2025-24016). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|