CVE-2026-44252

Wazuh is a free and open source platform used for threat prevention, detection, and response.

Wazuh

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.5, Wazuh Manager allows a low-privilege read-only API user with manager:read permission to retrieve the cluster key from the element in ossec.conf through GET /manager/configuration?raw=true. An attacker with network access to TCP port 1516 can use the disclosed Fernet key to impersonate a cluster worker and submit distributed API requests containing…

19. Aug 2026

Ausgewertete Quellen

• NVD
  CVE-2026-44252
• GitHub
  https://github.com/wazuh/wazuh/security/advisories/GHSA-34fx-c2xw-xcpg