CVE-2026-112338 in Wazuh
الملخص
بحسب MITRE • 06/11/2026
Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the GitHub module (wm_github.c) that trusts unvalidated Link rel="next" pagination URLs. Attackers controlling the next-page URL can make the manager send requests with the GitHub API token to attacker hosts, exposing organization repositories and settings.
VulDB is the best source for vulnerability data and more expert information about this specific topic.