CVE Tools
Track your stack

Wazuh

53 CVEs tracked since 2025. Since Oct 2025, none of them reached CISA KEV.

Wazuh CVEs per month

Oct 2025 to Aug 2026. Point at a month, or focus the strip and use the arrow keys.
Wazuh CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-1080
2025-11null or fewer
2025-12null or fewer
2026-01null or fewer
2026-02null or fewer
2026-03120
2026-04null or fewer
2026-05null or fewer
2026-06null or fewer
2026-0780
2026-08250

Products

The products that kept showing up in Wazuh's monthly top three, with their CVEs summed over those months.

  1. Wazuh494 months
  2. Wazuh-manager72 months
  3. Wazuh (GitHub Actions)11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wazuh.

  1. CVE-2026-71540Wazuh Manager cluster header parsing allows pre-authentication memory exhaustion7.5
  2. CVE-2026-61811Wazuh: Unbounded Recursion in os_xml `_getattributes()` Causes analysisd Worker Thread Stack Exhaustion6.5
  3. CVE-2026-61802Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config6.5
  4. CVE-2026-61800Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)9.1
  5. CVE-2026-61783Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key6.5
  6. CVE-2026-54084Wazuh agent enrollment NULL pointer dereference via malformed manager response5.3
  7. CVE-2026-54085Wazuh: Missing input validation in multiple active response scripts allows argument injection7.1
  8. CVE-2026-54083Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion8.1
  9. CVE-2026-49392Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd5.3
  10. CVE-2026-44256Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username5.3
  11. CVE-2026-45798Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: field7.5
  12. CVE-2026-49441Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh manager9.1
  13. CVE-2026-41424Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpoint8.2
  14. CVE-2026-44255Wazuh: Username Enumeration via Timing Side-Channel5.3
  15. CVE-2026-48024Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager9.1

The record

Peak rank
#61 in Aug 2026
Busiest month shown
Aug 2026, 25 CVEs
Months with a KEV entry
0 since Oct 2025
Monthly snapshots
4 since 2025
Wazuh's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store