Wazuh Multiple Vulnerabilities - Remote Code Execution and DoS

CERT-Bund identified multiple security vulnerabilities in Wazuh, an open-source security monitoring platform used for intrusion detection, log analysis, and SIEM functions. The vulnerabilities carry a CVSS Base Score of 6.7 (medium) and temporal score of 6.0, with remote attack capability confirmed. Threat actors can exploit these flaws to conduct denial of service attacks, execute arbitrary code, manipulate data, and disclose sensitive information.

Organizations using Wazuh should immediately identify whether they are running affected versions (Open Source Wazuh <4.13.0, <4.3.11, <4.14.0, or Manager/Agent <4.8.0) and apply appropriate mitigations or updates. Since this is an open-source platform commonly deployed in enterprise security infrastructure, both private sector technology companies and government agencies should prioritize patching. No specific compliance deadline was provided in the advisory.