CVE-2026-56699

Опубликовано: 15 июл. 2026

Источник: nvd

Описание

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Per Wazuh's Security Policy, vulnerabilities affecting only non-GA versions are not eligible for a CVE ID.

Связанные уязвимости

GHSA-r2pm-mgrm-39hq

CVSS3: 10

github

2 месяца назад

Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed under the manager's admin credentials, enabling document deletion, alert tampering, and cross-agent SIEM state manipulation.

BDU:2026-09828

CVSS3: 10

fstec

4 месяца назад

Уязвимость функции inventory_sync() компонента синхронизации кластера Wazuh Manager платформы для мониторинга безопасности и обнаружения угроз Wazuh, позволяющая нарушителю выполнить произвольный код