CVE-2026-25790 - Vulnerability Analysis

Overview

Wazuh >= 3.9.0 and < 4.14.3 contains a stack-based buffer overflow caused by unbounded sprintf with %lf on a fixed 128-byte buffer in the Security Configuration Assessment decoder, letting remote attackers cause denial of service or remote code execution via crafted JSON events.

Severity & Score

Impact

Remote attackers can cause denial of service or execute arbitrary code on the Wazuh manager, potentially compromising the system.

Mitigation

Upgrade to version 4.14.3 or later.

References

• https://github.com/wazuh/wazuh/security/advisories/GHSA-cf24-hq8x-5jx2

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner