Lucene search
+L

3 matches found

CVE
CVE
•added 2026/08/19 4:20 p.m.•48 views

CVE-2026-45798

Wazuh (open-source threat detection and response platform) is affected by a pre-authentication stack buffer overflow in compare_wazuh_versions() (src/shared/version_op.c). The function copies an attacker-controlled enrollment V: field into a 10-byte stack buffer via strncpy() without explicit nul...

7.5CVSS5.7AI score0.00916EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•38 views

PT-2026-78509

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, compare wazuh versions in src/shared/version op.c copies the attacker-controlled enrollment V: field into a 10-byte stack buffer with strncpy but does not...

7.5CVSS5.7AI score0.00916EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•2 views

CVE-2026-45798: Stack-based Buffer Overflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, comparewazuhversions in src/shared/versionop.c copies the attacker-controlled enrollment V: field into a 10-byte stack buffer with strncpy but does not explicitly...

7.5CVSS6AI score0.00916EPSS
SaveExploits1References8
Rows per page
Query Builder