CVE-2026-41499

CVE-2026-41499 (Wazuh) affects Wazuh releases 4.0.0 through before 4.14.4. The vulnerability is in parse_uname_string() (remoted_op.c), where four code paths write to strlen(ptr) - 1 without checking for empty strings, causing an unsigned underflow (0 - 1 → SIZE_MAX) and a write before the alloca...