Wazuh Database Code Execution

The vulnerability of the database synchronization module of the Wazuh Database platform for security monitoring and threat detection involves an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and execute...

CVE-2026-25772 Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...