CVE-2026-112339 Wazuh 3.9.0 before 4.14.9 Missing TLS Hostname Verification in fluent-forward Module

Wazuh from 3.9.0 before 4.14.9 contains a missing TLS hostname verification vulnerability in the fluent-forward module's wmfluentsslctx that allows network attackers to impersonate the Fluentd collector by presenting any certificate chaining to the configured cafile. Attackers who redirect the...

CVE-2026-112339

Wazuh versions 3.9.0 before 4.14.9 are vulnerable to a missing TLS hostname verification in the fluent-forward module's wm_fluent_ssl_ctx() function. This flaw allows network attackers to impersonate the Fluentd collector by presenting any certificate chain linked to the configured ca_file. By us...