Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module (`wdb_delta_event.c`). The SQL query construction logic allows for an integer underflow when calculating the remaining buffer size. This occurs because the code incorrectly aggregates the return value of `snprintf`. If a specific database synchronization payload exceeds the size of the query buffer (2048 bytes), the size calculation wraps around to a massive integer, effectively removing bounds checking for subsequent writes. This allows an attacker to corrupt the stack, leading to a Denial of Service (DoS) or potentially RCE. Version 4.14.3 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25772 Stack-Based Buffer Overflow in Wazuh Database Synchronization Module Before 4.14.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25772
Post summary
The post announces CVE‑2026‑25772, a stack‑based buffer overflow in Wazuh’s database synchronization module before version 4.14.3, without providing PoC, exploit code, or patch details.
CVE-2026-25772 Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buf… https://www.cve.org/CVERecord?id=CVE-2026-25772
Post summary
The excerpt announces a stack‑based buffer overflow vulnerability in Wazuh versions 4.4.0 through 4.14.2 and links to the CVE record, but provides no PoC, exploit, patch, or evidence of active use.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wazuh | wazuh | - | - | - |