CVE-2025-15612Disclosure(wazuh / wazuh)

LOWCVSS 8.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. Attackers with network access can perform man-in-the-middle attacks to intercept and modify downloaded dependencies or code during the build process, leading to remote code execution and supply chain compromise.

wazuh CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/wazuh/wazuh/security/advisories/GHSA-wvg9-7q49-c7mg

Vendor / third-party advisories

https://www.vulncheck.com/advisories/various-uses-of-curl-without-verifying-the-authenticity-of-the-ssl-certificate-leading-to-mitm-rce-in-build-infrastructure

Weakness type (CWE)

CWE-295CWE-829

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

wazuh

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

wazuh

Products

wazuh

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud196d
Disclosure
🚨*CVE* CVE-2025-15612 Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificat… https://www.cve.org/CVERecord?id=CVE-2025-15612 ----- Traducción: CVE-2025-15612 Los… http://infoflow.cloud`
Post summary
The message announces CVE‑2025‑15612, highlighting an insecure transport issue in Wazuh provisioning scripts that disables SSL/TLS verification; no PoC, exploit, or patch details are provided.
00000124
65 followersView on X
CVE@CVEnew196d
Disclosure
CVE-2025-15612 Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificat… https://www.cve.org/CVERecord?id=CVE-2025-15612
Post summary
The post announces a new CVE (CVE-2025-15612) concerning Wazuh provisioning scripts that use curl with the -k flag, creating an insecure transport, but it provides no PoC, exploit method, active exploitation evidence, or patch details.
00000197
56.9K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	wazuh	wazuh	-	-	-

Explore more

Back to dashboard wazuh CVEs wazuh vulnerabilities