Wazuh

Everything Threat Times has reported about Wazuh: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Wazuh Critical Flaw Allows Cluster Workers to Overwrite Master Config Files

Threat TimesOct 13, 2026

A high-severity vulnerability in Wazuh versions before 4.14.8 enables malicious cluster workers to overwrite protected configuration files and achieve root remote code execution.

Vulnerabilities

Critical Wazuh Flaw Lets Authenticated Users Run Root Commands via Config Bypass

Threat TimesOct 13, 2026

A case-sensitivity mismatch in Wazuh 4.14.3 through 4.14.7 allows authenticated attackers to execute commands as root on the collector.