https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:30:47.508114+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-356448 EUVD-2026-356448 2026-10-02T15:30:47.543082+00:00 EUVD-2026-356448 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49392 fkie_cve-2026-49392 2026-10-02T15:30:47.543117+00:00

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile() and DB::searchFile() in src/syscheckd/src/db/src/file.cpp concatenate a monitored file path into SQLite row filters. On non-Windows systems, FIMDBCreator::encodeString() does not escape the value. A local user who can create a filename in a File Integrity Monitoring directory can inject a UNION SELECT expression when wazuh-syscheckd processes or deletes that path. The confirmed primitive manipulates SELECT result sets consumed by the FIM code; stacked statements and remote code execution were not demonstrated. This issue is fixed in versions 4.14.6 and 5.0.0-beta3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2699 WID-SEC-W-2026-2699 — Wazuh: Mehrere Schwachstellen 2026-10-02T15:30:47.543152+00:00

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen SQL-Injection Angriff durchzuführen.