CVE-2026-112338

Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the GitHub module wmgithub.c that trusts unvalidated Link rel="next" pagination URLs. Attackers controlling the next-page URL can make the manager send requests with the GitHub API token to attacker hosts,...

CVE-2026-112338 Wazuh from 4.3.0 before 4.14.9 SSRF via GitHub Module Link Pagination

Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the GitHub module wmgithub.c that trusts unvalidated Link rel="next" pagination URLs. Attackers controlling the next-page URL can make the manager send requests with the GitHub API token to attacker hosts,...

EUVD-2026-118281

Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the GitHub module wmgithub.c that trusts unvalidated Link rel="next" pagination URLs. Attackers controlling the next-page URL can make the manager send requests with the GitHub API token to attacker hosts,...

CVE-2026-112338

Wazuh versions 4.3.0 through 4.14.8 are vulnerable to a Server-Side Request Forgery (SSRF) in the GitHub module (wm_github.c ). The root cause is the application trusting unvalidated Link rel="next" pagination URLs. An attacker who controls the next-page URL can force the manager to send requests...

CVE-2026-112338: wazuh: Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the GitHub module (wm_github.c)…

Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the GitHub module wmgithub.c that trusts unvalidated Link rel="next" pagination URLs. Attackers controlling the next-page URL can make the manager send requests with the GitHub API token to attacker hosts,...