wazuh

Wazuh Fixes 15 Vulnerabilities, Including Two Critical Root Code Execution Flaws

• Vulnerability Report

Wazuh Fixes 15 Vulnerabilities, Including Two Critical Root Code Execution Flaws

Do Son October 13, 2026 0

Fifteen Wazuh vulnerabilities, including two CVSS 9.4 flaws that allow remote code execution as root, are fixed in 4.14.8. Upgrade managers and agents now.

Critical Wazuh CVSS 10 Vulnerability Details and Proof-of-Concept Released

• Vulnerability Report

Critical Wazuh CVSS 10 Vulnerability Details and Proof-of-Concept Released

Do Son June 15, 2026 0

Public details and PoC exploit code expose a critical Wazuh CVSS 10 vulnerability allowing attackers to smuggle OpenSearch bulk operations.

Critical Wazuh Vulnerability Enables Lateral Movement and Root Access

• Vulnerability Report

Critical Wazuh Vulnerability Enables Lateral Movement and Root Access

Do Son April 30, 2026 0

Wazuh patches a critical 9.0 CVSS flaw (CVE-2026-30893) in cluster sync. Malicious peers can achieve RCE and lateral movement. Upgrade your clusters now.

Critical 9.1 CVSS Flaws Threaten Total Wazuh Cluster Takeover

• Vulnerability Report

Critical 9.1 CVSS Flaws Threaten Total Wazuh Cluster Takeover

Do Son March 24, 2026 0

Wazuh patches two critical 9.1 CVSS flaws (CVE-2026-25769 & CVE-2026-25770) allowing total cluster takeover. Upgrade to v4.14.3 now to stay protected.

Critical Wazuh RCE (CVE-2025-24016) Actively Exploited by Mirai Botnets

• Malware
• Vulnerability Report

Critical Wazuh RCE (CVE-2025-24016) Actively Exploited by Mirai Botnets

Do Son June 9, 2025 0

Akamai reports active exploitation of critical Wazuh RCE (CVE-2025-24016) by multiple Mirai botnets, targeting IoT devices since March 2025.

CVE-2025-24016 (CVSS 9.9): Critical RCE Vulnerability Discovered in Wazuh Server

• Vulnerability

CVE-2025-24016 (CVSS 9.9): Critical RCE Vulnerability Discovered in Wazuh Server

Do Son February 11, 2025 0

Discover the details of CVE-2025-24016, a critical security vulnerability affecting the Wazuh platform. Learn how to protect your organization from potential attacks.

New SilentCryptoMiner Campaign Abuses SIEM Agent in Cryptocurrency Mining Attacks

• Malware

New SilentCryptoMiner Campaign Abuses SIEM Agent in Cryptocurrency Mining Attacks

Do Son October 4, 2024 0

Discover the sophisticated cyberattack campaign using SilentCryptoMiner to mine cryptocurrencies. Learn how attackers evade detection and persist on infected systems.