CVE-2026-25772 - Vulnerability Analysis

Overview

Wazuh 4.4.0 to <4.14.3 contains a stack-based buffer overflow caused by integer underflow in SQL query buffer size calculation in wdb_delta_event.c, letting attackers cause denial of service or remote code execution, exploit requires crafted database synchronization payload exceeding buffer size.

Severity & Score

Impact

Attackers can cause denial of service or execute code remotely by exploiting buffer overflow in database synchronization.

Mitigation

Update to version 4.14.3 or later.

References

• https://github.com/wazuh/wazuh/security/advisories/GHSA-h7vp-j34v-h6j5

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner