CVE-2026-48162

creationtimestamp| type| source ---|---|--- 2026-08-19 18:10:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthdde65nv2b 2026-08-19 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthplgp7lj2e 2026-08-21 16:45:08+00:00| seen|...

CVE-2026-48162

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, DistributedAPI.sendtmpfile in framework/wazuh/core/cluster/dapi/dapi.py joins an attacker-controlled tmpfile value to WAZUHPATH without canonicalization or...