Known vulnerabilities in Wazuh
Vendor:
Wazuh
Software:
Wazuh
Software CPE:
cpe:2.3:a:wazuh:wazuh:*:*:*:*:*:*:*:*
Website:
https://wazuh.com/
Total vulnerabilities:
6
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.14.7
4.14.6
4.10.4
4.14.5
4.14.4
4.14.3
4.14.2
4.14.1
4.14.0
4.13.1
4.13.0
4.10.3
4.10.2
4.12.0
4.11.2
4.11.1
4.11.0
4.10.1
4.10.0
4.9.2
4.9.1
4.9.0
4.8.2
4.8.1
4.8.0
4.7.5
4.7.4
4.7.3
4.7.2
4.7.1
4.7.0
4.6.0
4.5.4
4.5.3
4.5.2
4.5.1
4.5.0
4.4.5
4.4.4
4.4.3
4.4.2
4.4.1
4.4.0
4.3.11
4.3.10
4.3.9
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.13.6
3.13.5
3.13.4
3.13.3
3.13.2
3.13.1
3.13.0
3.12.3
3.12.2
3.12.1
3.12.0
3.11.4
3.11.3
3.11.2
3.11.1
3.11.0
3.10.2
3.10.1
3.10.0
3.9.5
3.9.4
3.9.3
3.9.2
3.9.1
3.9.0
3.8.2
3.8.1
3.8.0
3.7.2
3.7.1
3.7.0
3.6.1
3.6.0
3.5.0
3.4.0
3.3.1
3.3.0
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.0
3.0.0
2.1.0
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144414 - Deserialization of Untrusted Data CVE-2026-28220 |
CWE-502 | Low | 4.14.5 | 20.08.2026 |
SB2026082022 |
||
| #VU110698 - Deserialization of Untrusted Data CVE-2025-24016 |
CWE-502 | Critical | 4.9.1 | 10.06.2025 |
SB2025061057 |
||
| #VU89031 - Heap-based Buffer Overflow CVE-2024-32038 |
CWE-122 | High | 4.7.2 | 29.04.2024 |
SB2024042902 |
||
| #VU88866 - NULL Pointer Dereference CVE-2023-49275 |
CWE-476 | Medium | 4.7.1 | 22.04.2024 |
SB2024042210 |
||
| #VU88865 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50260 |
CWE-94 | Medium | 4.7.2 | 22.04.2024 |
SB2024042209 |
||
| #VU86339 - Integer underflow CVE-2023-42463 |
CWE-191 | Low | 4.5.3 | 12.02.2024 |
SB2024021218 |