vikman90

18 credited records · 18 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
27Monitor	CVE-2026-93347No exploit	Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_filewazuh · wazuh-manager · CWE-22 Path traversal	Medium6.9	—	0.4%	Oct 13, 2026
27Monitor	CVE-2026-93346No exploit	Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Conditionwazuh · wazuh-manager · CWE-307 Pre-auth Race condition	Medium6.9	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-74047No exploit	Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpointwazuh · wazuh-manager · CWE-200 Info leak	High7.1	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-74045No exploit	Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoderwazuh · wazuh-manager · CWE-122 Memory safety	High7.1	—	0.3%	Oct 13, 2026
34Monitor	CVE-2026-74043No exploit	Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functionswazuh · wazuh-manager · CWE-22 Path traversal	High8.5	—	0.4%	Oct 13, 2026
34Monitor	CVE-2026-74041No exploit	Wazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case Mismatchwazuh · wazuh-manager · CWE-178	High8.6	—	0.4%	Oct 13, 2026
37Monitor	CVE-2026-74040No exploit	Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_workerwazuh · wazuh-manager · CWE-862 RCE Broken access control (IDOR)	Critical9.4	—	0.7%	Oct 13, 2026
34Monitor	CVE-2026-74037No exploit	Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_tokenwazuh · wazuh-manager · CWE-613	High8.6	—	0.4%	Oct 13, 2026
34Monitor	CVE-2026-74036No exploit	Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policieswazuh · wazuh-agent · CWE-863 RCE Broken access control (IDOR)	High8.6	—	0.8%	Oct 13, 2026
34Monitor	CVE-2026-74035No exploit	Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_userwazuh · wazuh-manager · CWE-863 Auth bypass Broken access control (IDOR)	High8.6	—	0.6%	Oct 13, 2026
34Monitor	CVE-2026-74034Proof of concept	Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Commandwazuh · wazuh-manager · CWE-862 Pre-auth Broken access control (IDOR)	High8.7	—	0.4%	Oct 13, 2026
33Monitor	CVE-2026-74033No exploit	Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlerswazuh · wazuh-manager · CWE-22 Path traversal	High8.4	—	0.3%	Oct 13, 2026
21Monitor	CVE-2026-74032No exploit	Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actionswazuh · wazuh-manager · CWE-863 Broken access control (IDOR)	Medium5.3	—	0.3%	Oct 13, 2026
28Monitor	CVE-2026-74031No exploit	Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helperswazuh · wazuh-manager · CWE-22 Path traversal	High7.0	—	0.5%	Oct 13, 2026
27Monitor	CVE-2026-74030No exploit	Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansionwazuh · wazuh-agent · CWE-776	Medium6.9	—	0.4%	Oct 13, 2026
28Monitor	CVE-2026-74044No exploit	Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hellowazuh · wazuh · CWE-22 Path traversal	High7.0	—	0.6%	Aug 18, 2026
25Monitor	CVE-2025-15612No exploit	Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCEwazuh · wazuh · CWE-295 pre-auth RCE Weak crypto	Medium6.3	—	0.2%	Mar 27, 2026
33Monitor	CVE-2025-15617Proof of concept	Wazuh GitHub Actions Workflow Exposure of Sensitive Credentialswazuh · wazuh · CWE-522 Pre-auth Info leak	High8.3	—	0.3%	Mar 27, 2026

CVE-2026-93347
27Monitor
Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file
MediumCVSS 6.9No exploitEPSS 0%
- Path traversal
wazuh · wazuh-managerOct 13, 2026
CVE-2026-93346
27Monitor
Wazuh 4.0.0 before 4.14.8 API Brute-Force Protection Bypass via Race Condition
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- Race condition
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74047
28Monitor
Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint
HighCVSS 7.1No exploitEPSS 0%
- Info leak
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74045
28Monitor
Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74043
34Monitor
Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functions
HighCVSS 8.5No exploitEPSS 0%
- Path traversal
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74041
34Monitor
Wazuh 4.14.3 < 4.14.8 / 4.10.4 Remote Command Validation Bypass via Case Mismatch
HighCVSS 8.6No exploitEPSS 0%
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74040
37Monitor
Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74037
34Monitor
Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_token
HighCVSS 8.6No exploitEPSS 0%
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74036
34Monitor
Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SCA Command Policies
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
wazuh · wazuh-agentOct 13, 2026
CVE-2026-74035
34Monitor
Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_user
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
- Broken access control (IDOR)
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74034
34Monitor
Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Command
HighCVSS 8.7Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74033
33Monitor
Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlers
HighCVSS 8.4No exploitEPSS 0%
- Path traversal
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74032
21Monitor
Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actions
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74031
28Monitor
Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helpers
HighCVSS 7.0No exploitEPSS 0%
- Path traversal
wazuh · wazuh-managerOct 13, 2026
CVE-2026-74030
27Monitor
Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YAML Alias Expansion
MediumCVSS 6.9No exploitEPSS 0%
wazuh · wazuh-agentOct 13, 2026
CVE-2026-74044
28Monitor
Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello
HighCVSS 7.0No exploitEPSS 0%
- Path traversal
wazuh · wazuhAug 18, 2026
CVE-2025-15612
25Monitor
Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE
MediumCVSS 6.3No exploitEPSS 0%
- pre-auth RCE
- Weak crypto
wazuh · wazuhMar 27, 2026
CVE-2025-15617
33Monitor
Wazuh GitHub Actions Workflow Exposure of Sensitive Credentials
HighCVSS 8.3Proof of conceptEPSS 0%
- Pre-auth
- Info leak
wazuh · wazuhMar 27, 2026