wazuh

9 known vulnerabilities in wazuh, 2 critical, 1 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2025-24016 CVSS 9.9 critical · actively exploited Wazuh Server Deserialization of Untrusted Data Vulnerability

Latest vulnerabilities

  • CVE-2026-71540 CVSS 7.5 high Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.9.0 until…
  • CVE-2026-61811 CVSS 6.5 medium Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until…
  • CVE-2026-61802 CVSS 6.5 medium Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0…
  • CVE-2026-61800 CVSS 9.1 critical Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0…
  • CVE-2026-61783 CVSS 7.0 high Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0…
  • CVE-2026-54085 CVSS 7.1 high Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0…
  • CVE-2026-54084 CVSS 5.3 medium Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0…
  • CVE-2026-54083 CVSS 8.1 high Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock…
  • CVE-2025-24016 CVSS 9.9 critical · actively exploited Wazuh Server Deserialization of Untrusted Data Vulnerability