CVE-2025-15615 in Wazuh

요약 (영어)

Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation requests. Attackers can exploit the lack of renegotiation limits to consume CPU resources and render the authd service unavailable.

책임이 있는

VulnCheck

예약하다

2026. 03. 27.

공개

2026. 03. 27.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
353996	Wazuh authd 권한 상승	276	정의되지 않음	공식 수정	CVE-2025-15615