Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Tag: wazuh Clear
ID Title
CVE-2026-28220 Unsafe Deserialization in wazuh (CVE-2026-28220)
vulnerability in wazuh (CVE-2026-28220). Successful exploitation can lead to full system takeover. Exploitable via ``ALLOWED_CALLABLES_PACKAGES``.
CVE-2026-40106 Vulnerability in privilege-escalation (CVE-2026-40106)
vulnerability in privilege-escalation (CVE-2026-40106). Risk of unauthorized operations or information disclosure.
CVE-2026-44251 Vulnerability in c (CVE-2026-44251)
vulnerability in c (CVE-2026-44251). Risk of unauthorized operations or information disclosure.
CVE-2026-33754 Vulnerability in dos (CVE-2026-33754)
vulnerability in dos (CVE-2026-33754). Risk of unauthorized operations or information disclosure.
CVE-2026-34150 Vulnerability in wazuh (CVE-2026-34150)
vulnerability in wazuh (CVE-2026-34150). Risk of unauthorized operations or information disclosure.
CVE-2026-39359 Path Traversal in path-traversal (CVE-2026-39359)
path traversal in path-traversal (CVE-2026-39359). Confidential information can be exposed externally.
CVE-2026-33434 Vulnerability in wazuh (CVE-2026-33434)
vulnerability in wazuh (CVE-2026-33434). Risk of unauthorized operations or information disclosure.
CVE-2026-56401 Vulnerability in dos (CVE-2026-56401)
vulnerability in dos (CVE-2026-56401). Risk of unauthorized operations or information disclosure.
CVE-2026-32983 Vulnerability in dos (CVE-2026-32983)
vulnerability in dos (CVE-2026-32983). Risk of unauthorized operations or information disclosure.
CVE-2026-32984 Out-of-Bounds Read in dos (CVE-2026-32984)
vulnerability in dos (CVE-2026-32984). Risk of unauthorized operations or information disclosure.
CVE-2025-24016 KEV [KEV] Unsafe Deserialization in wazuh (CVE-2025-24016)
vulnerability in wazuh (CVE-2025-24016). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →