107 matches found
Wazuh Server 4.6.0 < 4.14.6 SQL Injection (CVE-2026-49392)
The version of Wazuh Server on the remote host is at least 4.6.0 and prior to 4.14.6. It is, therefore, affected by a SQL injection vulnerability: - DB::getFile and DB::searchFile concatenate a monitored file path into SQLite row filters without proper escaping on non-Windows systems. A local use...
5.3CVSS5.5AI score0.00191EPSS
SaveExploits0References2
20