CVE-2026-74041 in wazuh-manager
요약
\~에 의해 MITRE • 2026. 10. 13.
Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:update_config can inject an uppercase LOG_FORMAT command localfile that the collector runs as root on reload.
Be aware that VulDB is the high quality source for vulnerability data.