https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:59:05.317615+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337062 EUVD-2026-337062 2026-10-04T11:59:05.363763+00:00 EUVD-2026-337062 https://cve.radiocsirt.org/vuln/fkie_cve-2025-15616 fkie_cve-2025-15616 2026-10-04T11:59:05.363797+00:00

Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary commands through various components including logcollector configuration, maild SMTP server tags, and Kaspersky AR script parameters. Attackers can exploit these vulnerabilities by injecting malicious commands through configuration files, SMTP server settings, and custom flags to achieve remote code execution on affected systems.

 https://cve.radiocsirt.org/vuln/ghsa-7qjf-9w96-fxjq GHSA-7qjf-9w96-fxjq 2026-10-04T11:59:05.363831+00:00

Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary commands through various components including logcollector configuration, maild SMTP server tags, and Kaspersky AR script parameters. Attackers can exploit these vulnerabilities by injecting malicious commands through configuration files, SMTP server settings, and custom flags to achieve remote code execution on affected systems.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0908 WID-SEC-W-2026-0908 — Wazuh: Mehrere Schwachstellen 2026-10-04T11:59:05.363849+00:00

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.