CVE-2026-44251Medium· 6.5▾ SunlitWazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/shared/msgs.c:389 allows any enrolled Wazuh agent to cras…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.4%
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_crypto/shared/msgs.c:389 allows any enrolled Wazuh agent to crash the wazuh-remoted process on the manager, immediately disconnecting all agents from the manager. A second code path reached by the same underflow may allow heap memory corruption. This issue has been fixed in version 4.14.5.
wazuh >= 3.0.0, < 4.14.5Upgrade past the affected range:
wazuh 4.14.5Connected by shared product, vendor, weakness, or advisory.
CVE-2026-40106Medium· 4.7Wazuh is a free and open source platform used for threat prevention, detection, and response
CVE-2026-44256Medium· 5.3Wazuh is a free and open source platform used for threat prevention, detection, and response
CVE-2026-44253Medium· 4.9Wazuh is a free and open source platform used for threat prevention, detection, and response
CVE-2026-45798High· 7.5Wazuh is a free and open source platform used for threat prevention, detection, and response
CVE-2026-48024Critical· 9.1Wazuh is a free and open source platform used for threat prevention, detection, and response
CVE-2026-48162Critical· 9.1Wazuh is a free and open source platform used for threat prevention, detection, and response