CVE-2026-74037 - wazuh-manager
The Wazuh manager (versions 4.0.0 through 4.14.7) does not properly block authentication tokens for users who have had their admin rights removed. This means a former…

Too many irrelevant or confusing CVEs? Use stackflag.com

#wazuhmanager #wazuh #CVE #infosec

CVE-2026-74035 - wazuh-manager
Versions of Wazuh Manager from 4.6.0 up to 4.14.7 let a delegated administrator set a user’s password to blank, which bypasses the normal checks and allows access to the…

Too many irrelevant or confusing CVEs? Use stackflag.com

#wazuhmanager #wazuh #CVE #infosec

CVE-2026-74043 - wazuh-manager
The Wazuh manager (versions 4.1.1 through 4.14.7) lets anyone with the cluster key send specially crafted upload requests that include ".." in the filename. This lets the…

Too many irrelevant or confusing CVEs? Use stackflag.com

#wazuhmanager #wazuh #CVE #infosec

CVE-2026-74041 - wazuh-manager
Versions of the Wazuh manager before 4.14.8 have a mismatch in how they check configuration files, allowing users who can change settings to add an uppercase LOG_FORMAT…

Too many irrelevant or confusing CVEs? Use stackflag.com

#wazuhmanager #wazuh #CVE #infosec

CVE-2026-74040 - wazuh-manager
Wazuh manager versions from 3.9.0 up to 4.14.7 allow a cluster worker to replace important configuration files on the master server. If an attacker controls a worker, they…

Too many irrelevant or confusing CVEs? Use stackflag.com

#wazuhmanager #wazuh #CVE #infosec