CVE-2026-61811

The Wazuh security platform (versions 3.8.0 through 4.14.7 ) is vulnerable to a stack exhaustion issue in the _getattributes() function located in src/os_xml/os_xml.c. The root cause is unbounded recursion that processes XML attributes without a depth limit while allocating large local buffers in...