Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/18 5:26 p.m.5 views

CVE-2026-74044 Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello

Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload without validation. Attackers holding a valid cluster Fernet key can craft a...

7CVSS5.6AI score
SaveExploits0References6
Rows per page
Query Builder