https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:57:40.989766+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338394 EUVD-2026-338394 2026-10-06T11:57:40.992319+00:00 EUVD-2026-338394 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33754 fkie_cve-2026-33754 2026-10-06T11:57:40.992358+00:00

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.9.0 and above, prior to 4.14.5, a remote attacker can trigger memory exhaustion in the cluster protocol parser by sending a crafted message header with an arbitrarily large payload length. The length is trusted before authentication/decryption and used directly to allocate memory, allowing unauthenticated denial of service of the cluster service. This issue has been fixed in version 4.14.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2377 WID-SEC-W-2026-2377 — Wazuh: Mehrere Schwachstellen 2026-10-06T11:57:40.992406+00:00

Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.