Wazuh-inc
27 CVEs tracked since 2022. Since Dec 2022, none of them reached CISA KEV.
Wazuh-inc CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2022-12 | 4 | 0 |
| 2023-01 | 3 or fewer | |
| 2023-02 | 3 or fewer | |
| 2023-03 | no snapshot | |
| 2023-04 | 3 or fewer | |
| 2023-05 | 3 or fewer | |
| 2023-06 | 9 | 0 |
| 2023-07 | 5 | 0 |
| 2023-08 | 4 or fewer | |
| 2023-09 | 3 or fewer | |
| 2023-10 | 4 or fewer | |
| 2023-11 | 4 or fewer | |
| 2023-12 | 4 or fewer | |
| 2024-01 | 4 or fewer | |
| 2024-02 | 4 or fewer | |
| 2024-03 | 4 or fewer | |
| 2024-04 | 4 or fewer | |
| 2024-05 | 5 or fewer | |
| 2024-06 | 4 or fewer | |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 9 | 0 |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 11 or fewer | |
| 2026-11 | 3 or fewer |
Products
The products that kept showing up in Wazuh-inc's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Wazuh-inc.
- CVE-2026-41499Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()6.5
- CVE-2026-30893Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peer9.0
- CVE-2026-28221Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_646.5
- CVE-2026-26206Wazuh: API brute-force protection bypass via race condition in login attempt tracking6.5
- CVE-2026-26204Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData4.4
- CVE-2025-15612Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE4.8
- CVE-2026-25790Wazuh has Stack-Based Buffer Overflow in Security Configuration Assessment JSON Parser4.9
- CVE-2026-25772Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow4.9
- CVE-2026-25771Wazuh Vulnerable to Denial of Service via Synchronous I/O Blocking in Asynchronous Authentication Middleware5.3
- CVE-2026-25770Wazuh has Privilege Escalation to Root via Cluster Protocol File Write9.1
- CVE-2026-25769Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization9.1
- CVE-2025-64169Wazuh NULL pointer dereference in fim_alert line 6664.9
- CVE-2025-54866Wazuh installation fails to protected authd.pass on Windows5.5
- CVE-2025-30201Wazuh NetNTLMv2 Hash Theft In Multiple Centralized Configuration Capabilities7.7
- CVE-2025-64483Wazuh API – Agent Configuration Has Improper Access Control in Agent Enrollment Endpoint6.3
The record
- Peak rank
- #79 in Jun 2023
- Busiest month shown
- Jun 2023, 9 CVEs
- Months with a KEV entry
- 0 since Dec 2022
- Monthly snapshots
- 4 since 2022