CVE-2026-112334

Wazuh versions 1.0.0 before 4.14.9 are vulnerable to an out-of-bounds write vulnerability in wazuh-execd . An attacker with privileged manager-configuration access can corrupt root process memory by providing excess ar.conf entries. Specifically, by controlling ossec.conf active-response blocks, ...

CVE-2026-112334 Wazuh 1.0.0 before 4.14.9 Out-of-Bounds Write in wazuh-execd via ar.conf

Wazuh from 1.0.0 before 4.14.9 contains an out-of-bounds write vulnerability in wazuh-execd that allows privileged manager-configuration attackers to corrupt root process memory via excess ar.conf entries. Attackers controlling ossec.conf active-response blocks can push over 64 commands to agents...