https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:12:11.481452+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375380 EUVD-2026-375380 2026-10-03T12:12:11.524806+00:00 EUVD-2026-375380 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61811 fkie_cve-2026-61811 2026-10-03T12:12:11.524841+00:00

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the _getattributes() function in src/os_xml/os_xml.c recursively processes every XML attribute without a depth limit while allocating two large local buffers in each stack frame. An enrolled agent can submit a Windows EventChannel event containing an element with enough attributes to exhaust the analysisd worker-thread stack, trigger a segmentation fault, and interrupt log ingestion. The element-depth limit in _ReadElem() does not constrain the number of attributes on one element, so it does not prevent this condition. This issue is fixed in version 4.14.7.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2883 WID-SEC-W-2026-2883 — Wazuh: Mehrere Schwachstellen 2026-10-03T12:12:11.524876+00:00

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.