https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T06:08:17.461075+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09828 bdu:2026-09828 2026-10-18T06:08:17.464095+00:00 bdu:2026-09828 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56699 fkie_cve-2026-56699 2026-10-18T06:08:17.464131+00:00

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Per Wazuh's Security Policy, vulnerabilities affecting only non-GA versions are not eligible for a CVE ID.

 https://cve.radiocsirt.org/vuln/ghsa-r2pm-mgrm-39hq GHSA-r2pm-mgrm-39hq 2026-10-18T06:08:17.464164+00:00

Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed under the manager's admin credentials, enabling document deletion, alert tampering, and cross-agent SIEM state manipulation.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1829 WID-SEC-W-2026-1829 — Wazuh Manager: Schwachstelle ermöglicht Privilegieneskalation 2026-10-18T06:08:17.464183+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Wazuh Manager ausnutzen, um seine Privilegien zu erhöhen.