https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:28:21.772836+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338639 EUVD-2026-338639 2026-10-06T14:28:21.776698+00:00 EUVD-2026-338639 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33434 fkie_cve-2026-33434 2026-10-06T14:28:21.776733+00:00

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 4.6.0 and above, prior to 4.14.5, a logic error in CheckRateLimitsMiddleware.dispatch() causes the /events endpoint rate check to unconditionally overwrite the general rate limit result. When the global max_request_per_minute is exceeded, requests to /events still succeed if the events-specific counter (hardcoded 30/min) has not been reached. This allows event injection into analysisd beyond the admin-configured global rate limit. This issue has been fixed in version 4.14.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2377 WID-SEC-W-2026-2377 — Wazuh: Mehrere Schwachstellen 2026-10-06T14:28:21.776777+00:00

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.