4 matches found
CVE-2026-112336
Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote attackers to exhaust wazuh-analysisd memory via repeated static fields. Attackers can enroll an agent through passwordless enrollment and send events with duplicate fields su...
CVE-2026-112336
Wazuh Manager versions 3.0.0 before 4.14.9 are vulnerable to a memory leak within the generic JSON decoder. This flaw allows remote attackers to exhaust wazuh-analysisd memory by sending events containing repeated static fields, such as duplicate id fields, following a passwordless agent enrollme...
CVE-2026-112336 Wazuh Manager 3.0.0 before 4.14.9 Memory Leak DoS via JSON Decoder
Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote attackers to exhaust wazuh-analysisd memory via repeated static fields. Attackers can enroll an agent through passwordless enrollment and send events with duplicate fields su...
EUVD-2026-118279
Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote attackers to exhaust wazuh-analysisd memory via repeated static fields. Attackers can enroll an agent through passwordless enrollment and send events with duplicate fields su...