Výsledky hledání

výrobce: Wazuh× v celém archivu zrušit filtry

5 karet z 5 položek CZ · EN/orig

1

1

Wazuh: PoC pubblici per lo sfruttamento di varie vulnerabilità

Disponibili Proof of Concept per lo sfruttamento di 5 vulnerabilità, di cui 2 con gravità "critica" e 3 con gravità "alta", presenti in Wazuh, piattaforma open-source con funzionalità Security Information and Event Management (SIEM) e Extended Detection and Response (XDR).

EPSS 0.01 CVE-2026-44252 CVE-2026-44901 CVE-2026-46343 CVE-2026-48024 CVE-2026-48162 Wazuh IT

· CSIRT Itálie (ACN) · Wazuh: PoC pubblici per lo sfruttamento di varie vulnerabilità

1

2

ZDI-26-527: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wazuh. An attacker must first obtain the ability to execute low-privileged code on a worker node in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.9. The following CVEs are assigned: CVE-2026-44901.

EPSS 0.01 CVSS 9.9 CVE-2026-44901 Wazuh US

· Zero Day Initiative · ZDI-26-527: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-26-528: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wazuh. An attacker must first obtain the ability to execute low-privileged code on a worker node in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.9. The following CVEs are assigned: CVE-2026-28220.

EPSS 0.00 CVSS 9.9 CVE-2026-28220 Wazuh US

· Zero Day Initiative · ZDI-26-528: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability