Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.
[UPDATE] [hoch] Wazuh: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-14 09:14 UTC
- Importiert: 2026-10-14 11:42 UTC
- CVSS: 9.4
- Quelle-ID:
cert_bund - uid_hash:
2713c582f18eac332ab1dc0e71b9f9a5dce80146d9f039e5e25607ed147ca0a0
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.4 |
MEDIUM |
6.9 |
2026-10-13 |
|||
CRITICAL |
9.4 |
HIGH |
7 |
2026-10-13 |
|||
CRITICAL |
9.4 |
MEDIUM |
5.3 |
2026-10-13 |
|||
CRITICAL |
9.4 |
HIGH |
8.4 |
2026-10-13 |
|||
CRITICAL |
9.4 |
HIGH |
8.7 |
2026-10-13 |
|||
CRITICAL |
9.4 |
HIGH |
8.6 |
2026-10-13 |
|||
CRITICAL |
9.4 |
HIGH |
8.6 |
2026-10-13 |
|||
CRITICAL |
9.4 |
HIGH |
8.6 |
2026-10-13 |
|||
CRITICAL |
9.4 |
CRITICAL |
9.4 |
2026-10-13 |
|||
CRITICAL |
9.4 |
CRITICAL |
9.4 |
2026-10-13 |
|||
CRITICAL |
9.4 |
CRITICAL |
9 |
2026-10-13 |
|||
CRITICAL |
9.4 |
HIGH |
7.1 |
2026-10-13 |
|||
CRITICAL |
9.4 |
HIGH |
7.1 |
2026-10-13 |
|||
CRITICAL |
9.4 |
MEDIUM |
6.9 |
2026-10-13 |
|||
CRITICAL |
9.4 |
MEDIUM |
6.9 |
2026-10-13 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |