Vendor

    Wazuh

    95 known vulnerabilities in products by Wazuh, 1 of them actively exploited (CISA KEV).

    Key figures

    95

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    17

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wazuh
    CriticalCVE-2025-24016

    Remote code execution in Wazuh server

    In CISA KEValso in 1 other product

    		9.9
    CriticalCVE-2026-25769

    Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization

    		9.1
    HighCVE-2023-50260

    Wazuh's vulnerability in host_deny AR script allows arbitrary command execution

    		8.8
    HighCVE-2021-26814

    Wazuh: Code Execution

    		8.8
    CriticalCVE-2021-44079

    Wazuh: Remote Code Execution

    		9.8
    CriticalCVE-2026-61800

    Wazuh: Path Traversal

    also in 1 other product

    		9.1
    CriticalCVE-2026-74040

    Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker

    also in 1 other product

    		9.1
    HighCVE-2026-74036

    Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policies

    also in 1 other product

    		7.2
    HighCVE-2025-15616

    Wazuh Agent and Manager OS Command Injection and Untrusted Search Path

    		6.7
    CriticalCVE-2026-67308

    Wazuh GitHub Actions Shell Injection via Fork Pull Request

    also in 1 other product

    		10.0
    CriticalCVE-2026-48024

    Wazuh: Path Traversal

    also in 1 other product

    		9.1
    CriticalCVE-2026-49441

    Wazuh: External Control of File Name or Path

    also in 1 other product

    		9.1
    CriticalCVE-2026-25770

    Wazuh has Privilege Escalation to Root via Cluster Protocol File Write

    		9.1
    HighCVE-2022-40497

    Wazuh: Remote Code Execution

    		8.8
    CriticalCVE-2026-48162

    Wazuh: External Control of File Name or Path

    		9.1
    HighCVE-2026-45798

    Wazuh: Stack-based Buffer Overflow

    also in 1 other product

    		7.5
    HighCVE-2026-44901

    Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

    also in 1 other product

    		8.4
    HighCVE-2026-74035

    Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_user

    also in 1 other product

    		7.2
    HighCVE-2026-74037

    Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_token

    also in 1 other product

    		7.2
    CriticalCVE-2024-32038

    Wazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability

    		9.8
    HighCVE-2026-74041

    Wazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case Mismatch

    also in 1 other product

    		7.2
    HighCVE-2026-74034

    Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Command

    also in 1 other product

    		7.5
    HighCVE-2026-44252

    Wazuh Manager dapi RBAC Bypass Allows Privilege Escalation

    also in 1 other product

    		8.8
    CriticalCVE-2026-28220

    Wazuh: Deserialization of Untrusted Data

    also in 1 other product

    		8.4
    HighCVE-2026-54083

    Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion

    also in 1 other product

    		8.1

    All vulnerabilities in search

    News

    Products

    Products by Wazuh
    Wazuh781
    Wazuh-manager210
    Wazuh-agent40