By year
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited wazuh flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2025-24016 Wazuh Server Deserialization of Untrusted DataExploited since Jun 10, 2025 · CVSS 9.9
Latest high and critical flaws
- CVE-2026-74047 Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authdHigh 7.1 · Oct 13, 2026
- CVE-2026-74045 Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from input but written bounded by OS_MAXSTR.High 7.1 · Oct 13, 2026
- CVE-2026-74043 Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and upload_decoder_file that allows malicious clusHigh 8.5 · Oct 13, 2026
- CVE-2026-74041 Wazuh 4.14.3 before 4.14.8 and 4.10.4 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command High 8.6 · Oct 13, 2026
- CVE-2026-74040 Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.process_files_from_worker allowing a cluster worker tCritical 9.4 · Oct 13, 2026
- CVE-2026-74037 Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the blacklist.High 8.6 · Oct 13, 2026
- CVE-2026-74036 Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration sourceHigh 8.6 · Oct 13, 2026
- CVE-2026-74035 Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places the reserved user guard and password poHigh 8.6 · Oct 13, 2026
- CVE-2026-74034 Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with attacker-coHigh 8.7 · Oct 13, 2026
- CVE-2026-74033 Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete_list_file() CDB list handlers that allows compromised clustHigh 8.4 · Oct 13, 2026
- CVE-2026-74031 Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file helpers that allows malicious cluster worHigh 7 · Oct 13, 2026
- CVE-2026-71540 Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.High 7.5 · Sep 24, 2026
- CVE-2026-61800 Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.Critical 9.1 · Aug 27, 2026
- CVE-2026-61783 Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.High 7 · Aug 27, 2026
- CVE-2026-54085 Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.High 7.1 · Aug 27, 2026
- CVE-2026-54083 Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.High 8.1 · Aug 27, 2026
- CVE-2026-49441 Wazuh is a free and open source platform used for threat prevention, detection, and response.Critical 9.1 · Aug 19, 2026
- CVE-2026-48162 Wazuh is a free and open source platform used for threat prevention, detection, and response.Critical 9.1 · Aug 19, 2026
- CVE-2026-48024 Wazuh is a free and open source platform used for threat prevention, detection, and response.Critical 9.1 · Aug 19, 2026
- CVE-2026-45798 Wazuh is a free and open source platform used for threat prevention, detection, and response.High 7.5 · Aug 19, 2026
- CVE-2026-44901 Wazuh is a free and open source platform used for threat prevention, detection, and response.High 8.4 · Aug 19, 2026
- CVE-2026-41424 Wazuh is a free and open source platform used for threat prevention, detection, and response.High 8.2 · Aug 19, 2026
- CVE-2026-46343 Wazuh is a free and open source platform used for threat prevention, detection, and response.High 7.5 · Aug 19, 2026
- CVE-2026-44252 Wazuh is a free and open source platform used for threat prevention, detection, and response.High 7.7 · Aug 19, 2026
- CVE-2026-74044 Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a High 7 · Aug 18, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.