Lucene search
+L

23 matches found

CNNVD
CNNVD
•added 2026/04/29 12:00 a.m.•25 views

Wazuh 安全漏洞

Wazuh is an open-source application developed by Wazuh. It is used for collecting, summarizing, indexing, and analyzing security data, helping organizations detect intrusions, threats, and abnormal behaviors. Versions of Wazuh from 4.8.0 to 4.14.4 contained security vulnerabilities. These...

8.2CVSS7.4AI score0.00572EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•39 views

PT-2026-35966

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.8.0 through 4.14.3 Description A stack-based buffer overflow exists in the print hex string function within wazuh-remoted. This occurs when formatting attacker-controlled bytes using sprintf on platforms where char is treated ...

6.5CVSS7AI score0.00572EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•4 views

CVE-2026-28221: Stack-based Buffer Overflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer overflow exists in printhexstring in wazuh-remoted. The bug is triggered when formatting attacker-controlled bytes using sprintfdstbuf +...

8.2CVSS7AI score0.00572EPSS
SaveExploits1References5
Rows per page
Query Builder