Wazuh Server 4.9.0 < 4.10.4 / 4.11.0 < 4.14.6 Incorrect Authorization (CVE-2026-41424)

The version of Wazuh Server on the remote host is 4.9.0 prior to 4.10.4, or 4.11.0 prior to 4.14.6. It is, therefore, affected by an incorrect authorization vulnerability: - PUT /security/users/userid passes request.get'user' instead of request.context'tokeninfo''sub' as currentuser. An...