Approved changes feed: RSS · Atom
cpe:2.3:a:wazuh:wazuh:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wazuh (a7402332-cdfc-5fc8-bb0e-3f511f6cb7fd) |
|---|---|
| Product | Wazuh (00a4f3c1-781b-55af-9e0f-164b9f0d64d7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/wazuh/wazuh |
purl2cpe | 2026-06-01 10:16:58.087722 |
pkg:github/wazuh/wazuh |
purl2cpe | 2026-06-01 10:16:58.087724 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-67308 |
vulnerable | 2026-09-16 04:33:05.964064 |
Wazuh GitHub Actions Shell Injection via Fork Pull Request
Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly interpolated into run steps, enabling command execution and exfiltration of secrets including GITHUB_TOKEN and AWS credentials on self-hosted runners.
Published: 2026-08-01T12:22:17.146Z
Updated: 2026-08-03T19:35:25.948Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-67307 |
vulnerable | 2026-09-16 04:33:05.720203 |
Wazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory Sync
MEDIUM (6.3)
Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, while validating only the agentid against the authenticated agent identity. This allows a low-privileged enrolled agent to spoof cluster attribution in indexed inventory and vulnerability documents by forging wazuh.cluster.name values and influencing the document _id prefix, potentially tampering with inventory records or, in shared-indexer multi-cluster deployments, poisoning another cluster's records when numeric agent IDs collide.
Published: 2026-08-01T12:22:18.079Z
Updated: 2026-08-03T18:35:41.271Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56699 |
vulnerable | 2026-07-29 01:00:29.255020 |
Details available
Published: 2026-07-15T11:25:32.119Z
Updated: 2026-08-06T16:42:35.813Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56401 |
vulnerable | 2026-07-29 01:00:29.147112 |
Details available
Published: 2026-07-08T13:49:05.553Z
Updated: 2026-07-15T11:42:41.971Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44251 |
vulnerable | 2026-07-29 00:52:14.158319 |
Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message
MEDIUM (6.5)
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/shared/msgs.c:389 allows any enrolled Wazuh agent to crash the wazuh-remoted process on the manager, immediately disconnecting all agents from the manager. A second code path reached by the same underflow may allow heap memory corruption. This issue has been fixed in version 4.14.5.
Published: 2026-07-17T00:01:41.131Z
Updated: 2026-07-17T18:06:15.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40106 |
vulnerable | 2026-07-29 00:46:21.403773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-39359 |
vulnerable | 2026-07-29 00:46:18.722200 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34150 |
vulnerable | 2026-07-29 00:43:23.651577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33754 |
vulnerable | 2026-07-29 00:43:22.635799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33434 |
vulnerable | 2026-07-29 00:43:21.936343 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28220 |
vulnerable | 2026-07-29 00:37:42.983794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41499 |
vulnerable | 2026-06-08 08:03:15.506219 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32984 |
vulnerable | 2026-06-08 07:57:18.413975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32983 |
vulnerable | 2026-06-08 07:57:18.413507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30893 |
vulnerable | 2026-06-08 07:57:14.445773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28221 |
vulnerable | 2026-06-08 07:55:15.018219 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26206 |
vulnerable | 2026-06-08 07:53:21.406029 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26204 |
vulnerable | 2026-06-08 07:53:21.404474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25790 |
vulnerable | 2026-06-08 07:53:20.467753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25772 |
vulnerable | 2026-06-08 07:53:20.327614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25771 |
vulnerable | 2026-06-08 07:53:20.327241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25770 |
vulnerable | 2026-06-08 07:53:20.326844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25769 |
vulnerable | 2026-06-08 07:53:20.326346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64169 |
vulnerable | 2026-06-08 07:39:18.168977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62792 |
vulnerable | 2026-06-08 07:39:16.636488 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62791 |
vulnerable | 2026-06-08 07:39:16.636259 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62790 |
vulnerable | 2026-06-08 07:39:16.636019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62789 |
vulnerable | 2026-06-08 07:39:16.635784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62788 |
vulnerable | 2026-06-08 07:39:16.635544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62787 |
vulnerable | 2026-06-08 07:39:16.635292 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62786 |
vulnerable | 2026-06-08 07:39:16.635003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62785 |
vulnerable | 2026-06-08 07:39:16.634656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59938 |
vulnerable | 2026-06-08 07:35:23.494165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54866 |
vulnerable | 2026-06-08 07:33:13.502650 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30201 |
vulnerable | 2026-06-08 07:16:59.285845 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24016 |
vulnerable | 2026-06-08 07:12:47.345213 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15616 |
vulnerable | 2026-06-08 07:06:36.558092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15615 |
vulnerable | 2026-06-08 07:06:36.556278 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15612 |
vulnerable | 2026-06-08 07:06:36.554861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47770 |
vulnerable | 2026-06-08 06:48:13.139935 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35177 |
vulnerable | 2026-06-08 06:37:35.384370 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32038 |
vulnerable | 2026-06-08 06:35:32.659477 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1243 |
vulnerable | 2026-06-08 06:25:39.658790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7340 |
vulnerable | 2026-06-08 06:21:57.617427 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50260 |
vulnerable | 2026-06-08 06:16:15.853602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49275 |
vulnerable | 2026-06-08 06:14:28.912137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42463 |
vulnerable | 2026-06-08 06:11:08.116575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40497 |
vulnerable | 2026-06-08 05:48:24.998945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44079 |
vulnerable | 2026-06-08 05:36:44.915789 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41821 |
vulnerable | 2026-06-08 05:35:21.089615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26814 |
vulnerable | 2026-06-08 05:30:45.252880 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19666 |
vulnerable | 2026-06-08 05:11:16.004450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.