https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:27:11.990808+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380412 EUVD-2026-380412 2026-10-04T09:27:12.021659+00:00 EUVD-2026-380412 https://cve.radiocsirt.org/vuln/fkie_cve-2026-74038 fkie_cve-2026-74038 2026-10-04T09:27:12.021690+00:00

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to cause denial of service by enrolling an agent with a dot-sequence name such as ".." through the enrollment port. Attackers exploit insufficient validation in OS_IsValidName() and unsafe path concatenation in delete_diff() to resolve the traversal to the parent queue directory, causing its subdirectories to be removed and stopping all Wazuh services requiring manual recovery.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2883 WID-SEC-W-2026-2883 — Wazuh: Mehrere Schwachstellen 2026-10-04T09:27:12.021725+00:00

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.