VulnSocial

CVE-2026-56699Disclosure

LOW

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Per Wazuh's Security Policy, vulnerabilities affecting only non-GA versions are not eligible for a CVE ID.

Back to dashboard
2.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-15: 2PoC Mentioned / Linked · 2026-07-15: 1Patch / Workaround · 2026-07-15: 1Technical Details · 2026-07-15: 107-15
Signal classification1 categories
Disclosure
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Aretiq.AI@AretiqAI
    Disclosure

    ARETIQ Daily Vulnerability Bulletin — July 15, 2026 🔴 CRITICAL: CVE-2026-56699 (wazuh/wazuh) AAS 13.1 🔴 CRITICAL: CVE-2026-53512 (better-auth/better-auth) AAS 12.7 — PoC available 25 vulnerabilities — CRITICAL: 2, HIGH: 23 Full bulletin: https://aretiq.ai/bulletins/2026-07-15/

    Post summary

    A daily vulnerability bulletin lists two critical CVEs, one flagged with a PoC, but provides no further technical, patch, or exploitation details.

    00080810
    227 followersView on X
  • Orizon@OrizonCyber
    Disclosure

    🚨 CVE-2026-56699 — CVSS 10/10 ██████████ Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests,... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/2LkTxgFqnc

    Post summary

    The post announces a critical CVE-2026-56699 affecting Wazuh Manager versions before 5.0.0-beta3, explains a technical failure to escape DataValue.index in bulk requests, and confirms that a patch has been released.

    10000139
    66 followersView on X

Explore more

Back to dashboard