https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:35:17.508098+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-356470 EUVD-2026-356470 2026-10-02T15:35:17.540644+00:00 EUVD-2026-356470 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44256 fkie_cve-2026-44256 2026-10-02T15:35:17.540680+00:00

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.4.0 until 4.14.6 and 5.0.0-beta2, api/api/middlewares.py decodes the Basic authentication username before credential validation and passes it to the access logger without neutralizing control characters. api/api/alogging.py interpolates that value into the plain-text API log. An unauthenticated attacker can include carriage returns or line feeds in the username to forge entries, obscure activity, or poison systems that consume the plain-text audit log. The JSON log format is not affected because JSON serialization escapes these characters. This issue is fixed in versions 4.14.6 and 5.0.0-beta2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2699 WID-SEC-W-2026-2699 — Wazuh: Mehrere Schwachstellen 2026-10-02T15:35:17.540722+00:00

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen SQL-Injection Angriff durchzuführen.