CVE-2025-24016

CVE-2025-24016 Wazuhサーバにおける安全でないデシリアライゼーションの脆弱性により、DAPIのリクエスト/レスポンス内で無害化されていない辞書インジェクションを通じてリモートコード実行が可能になります。この問題は、DistributedAPIパラメータがJSONとしてシリアライズされ、その後framework/wazuh/core/cluster/common.pyのaswazuhobject関数でデシリアライズされる方法に起因します。...

CVE-2026-25769---CVE-2026-25770

CVE-2026-25769 / CVE-2026-25770 – Wazuh 集群漏洞 警告：本仓库包含与安全漏洞相关的信息和代码。请仅用于教育目的或在授权环境中使用。 描述 在 Wazuh 集群配置（版本 ≥ 4.0.0）中发现了两个严重漏洞。这些缺陷影响使用多节点进行水平扩展、负载均衡和高可用性的部署。该配置允许管理多个代理而不会影响 Wazuh 服务器。 CVE-2026-25769 允许通过 DAPi 请求在主节点（master）和工作节点（worker）之间进行通信。工作节点使用 LocalClient 模块发送对象；主节点接受该消息并使用易受攻击的函数...

PT-2026-70992

Name of the Vulnerable Software and Affected Versions Wazuh Manager affected versions not specified Description A deserialization of untrusted data issue exists in the Cluster DAPI Protocol, which allows a remote attacker to execute arbitrary code and perform arbitrary file read and write...

CVE-2026-28220

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...

CVE-2026-28220

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...

EUVD-2026-45978

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...