CVE-Wazuh

Wazuh Manager — Iniezione NDJSON in inventorysync tramite DataValue.index controllato dall'agente - Bozza Un agente registrato può introdurre operazioni arbitrarie bulk di OpenSearch tramite DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Uso Semplice Usa questo progetto solo in ambienti sicuri e...

CVE-2026-56699

Wazuh Manager before 5.0.0-beta3 has a vulnerability where the DataValue.index field is not escaped when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed und...

CVE-2026-56699

...