Products: 6
    Vulnerabilities: 79
    Known Exploited: 1
    10
    Critical Level Threats
    26
    High Level Threats
    33
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-61802

    Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config

    Last Modified: Aug 28, 2026
    Published: Aug 27, 2026

    CVE-2026-61800

    Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)

    Last Modified: Aug 28, 2026
    Published: Aug 27, 2026

    CVE-2026-61783

    Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key

    Last Modified: Aug 28, 2026
    Published: Aug 27, 2026

    CVE-2026-54084

    Wazuh agent enrollment NULL pointer dereference via malformed manager response

    Last Modified: Aug 28, 2026
    Published: Aug 27, 2026

    CVE-2026-54085

    Wazuh: Missing input validation in multiple active response scripts allows argument injection

    Last Modified: Aug 31, 2026
    Published: Aug 27, 2026
    Items Per Page
    Wazuh Vulnerabilities & Security CVEs | CVE-DB