Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog by querying unprotected security endpoints. Attackers can request GET /security/actions and /security/resources, which omit the caller's RBAC policies, to map privileged actions and endpoints for privilege escalation planning.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
I Found an RBAC Authorization Bypass in Wazuh — by Vignesh Kumar https://medium.com/@vigneshkumaroffsec/i-found-an-rbac-authorization-bypass-in-wazuh-cve-2026-74032-4f6d88576ad8 Join us on Telegram: https://t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip