Wazuh Vulnerabilities Allow Critical Remote Attacks

CERT-Bund has released a security advisory (WID-SEC-2026-0771) concerning critical vulnerabilities in Wazuh, a security monitoring platform. These vulnerabilities, with a CVSS Base Score of 9.1, allow attackers to bypass security measures, gain root privileges, execute arbitrary code with root rights, or cause a denial-of-service condition. The advisory specifically impacts Wazuh versions prior to 4.14.3 and affects systems running on UNIX and other operating systems.

Organizations utilizing Wazuh versions prior to 4.14.3 should immediately assess their systems and apply available mitigations. Given the critical nature of these vulnerabilities and the potential for remote exploitation, prompt action is required to prevent security breaches. Affected entities should consult the advisory for specific mitigation steps and consider upgrading to a patched version as soon as possible to avoid potential security incidents and data compromise.