CVE-2026-74041

Wazuh versions 4.14.3 through 4.14.7 (and 4.10.4 ) are vulnerable to a remote-command validation bypass due to a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector. Authenticated users with manager:update_config permissions can inject an uppercase LOG_FORMAT command...