İçeriğe atla
Noroxi

wazuh kayıtları

wazuh üreticisine ait 74 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %1,4
Silahlaştırılmış
1 · %1,4
Pre-auth RCE
5
Düzeltme kaydı olan
%56,8
Yayından KEV’e ortanca
120 gün

Yıllara göre kayıt

  1. 18
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

74 kayıt
  • CVE-2025-24016
    97Hemen

    Remote code execution in Wazuh server

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %93

    wazuh · wazuh10 Şub 2025

  • CVE-2023-50260
    47Planlayın

    Wazuh's vulnerability in host_deny AR script allows arbitrary command execution

    YüksekCVSS 8,8İstismar yokEPSS %41

    wazuh · wazuh19 Nis 2024

  • CVE-2021-44079
    40Planlayın

    In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially

    KritikCVSS 9,8İstismar yokEPSS %3

    wazuh · wazuh22 Kas 2021

  • CVE-2026-25769
    39İzleyin

    Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization

    KritikCVSS 9,1Kavram kanıtıEPSS %8

    wazuh · wazuh17 Mar 2026

  • CVE-2024-32038
    39İzleyin

    Wazuh Analysis Engine Event Decoder Heap-based Buffer Overflow Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    wazuh · wazuh19 Nis 2024

  • CVE-2026-30893
    39İzleyin

    Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peer

    KritikCVSS 9,9İstismar yokEPSS %0

    wazuh · wazuh29 Nis 2026

  • CVE-2021-26814
    38İzleyin

    Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/file

    YüksekCVSS 8,8Kavram kanıtıEPSS %8

    wazuh · wazuh5 Mar 2021

  • CVE-2024-1243
    38İzleyin

    Remote code execution and local privilege escalation in Wazuh Windows agent via NetNTLMv2 hash theft

    KritikCVSS 9,5İstismar yokEPSS %0

    wazuh · wazuh10 Haz 2025

  • CVE-2026-61800
    36İzleyin

    Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)

    KritikCVSS 9,1İstismar yokEPSS %0

    wazuh · wazuh27 Ağu 2026

  • CVE-2025-30201
    36İzleyin

    Wazuh NetNTLMv2 Hash Theft In Multiple Centralized Configuration Capabilities

    KritikCVSS 9,1İstismar yokEPSS %0

    wazuh · wazuh21 Kas 2025

  • CVE-2026-48024
    36İzleyin

    Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager

    KritikCVSS 9,1İstismar yokEPSS %0

    wazuh · wazuh19 Ağu 2026

  • CVE-2026-49441
    36İzleyin

    Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh manager

    KritikCVSS 9,1İstismar yokEPSS %0

    wazuh · wazuh19 Ağu 2026

  • CVE-2026-28220
    36İzleyin

    Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node

    KritikCVSS 9,1İstismar yokEPSS %0

    wazuh · wazuh20 Tem 2026

  • CVE-2026-48162
    36İzleyin

    Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh manager

    KritikCVSS 9,1İstismar yokEPSS %0

    wazuh · wazuh19 Ağu 2026

  • CVE-2022-40497
    35İzleyin

    Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnera

    YüksekCVSS 8,8İstismar yokEPSS %1

    wazuh · wazuh27 Eyl 2022

  • CVE-2023-42455
    35İzleyin

    Wazuh vulnerable to user privilege escalation

    YüksekCVSS 8,8İstismar yokEPSS %0

    wazuh · wazuh-dashboard9 Eki 2023

  • CVE-2026-44901
    33İzleyin

    Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,4İstismar yokEPSS %0

    wazuh · wazuh19 Ağu 2026

  • CVE-2025-15617
    33İzleyin

    Wazuh GitHub Actions Workflow Exposure of Sensitive Credentials

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    wazuh · wazuh27 Mar 2026

  • CVE-2026-54083
    32İzleyin

    Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion

    YüksekCVSS 8,1İstismar yokEPSS %0

    wazuh · wazuh27 Ağu 2026

  • CVE-2026-41424
    32İzleyin

    Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpoint

    YüksekCVSS 8,2İstismar yokEPSS %0

    wazuh · wazuh19 Ağu 2026

  • CVE-2026-28221
    32İzleyin

    Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64

    YüksekCVSS 8,2İstismar yokEPSS %0

    wazuh · wazuh29 Nis 2026

  • CVE-2024-47770
    32İzleyin

    Ability to view Agent list with no privilege access in wazuh-dashboard

    YüksekCVSS 8,0İstismar yokEPSS %0

    wazuh · wazuh3 Şub 2025

  • CVE-2018-19666
    31İzleyin

    The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full

    YüksekCVSS 7,8İstismar yokEPSS %0

    ossec · ossec29 Kas 2018

  • CVE-2024-35177
    31İzleyin

    Improper Access Control in wazuh-agent

    YüksekCVSS 7,8İstismar yokEPSS %0

    wazuh · wazuh3 Şub 2025

  • CVE-2023-42463
    31İzleyin

    wazuh-logcollector integer underflow local privilege escalation

    YüksekCVSS 7,8İstismar yokEPSS %0

    wazuh · wazuh12 Oca 2024