CVE-2026-74032

Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog by querying unprotected security endpoints. Attackers can request GET /security/actions and /security/resources, which omit the caller's RBAC...

CVE-2026-74032 Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actions

Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog by querying unprotected security endpoints. Attackers can request GET /security/actions and /security/resources, which omit the caller's RBAC...

CVE-2026-74032

Wazuh versions 4.0.0 through 4.14.7 are vulnerable to an authorization bypass (CWE-863) that allows low-privileged authenticated users to access the RBAC catalog. By querying unprotected endpoints such as GET /security/actions and GET /security/resources , which fail to apply the caller's RBAC po...