Saad Fellahi@SaadFellahii
Disclosure
3 CVEs published in Wazuh. That puts me at 10 total. → CVE-2026-74037 (Critical): Root RCE on the manager → CVE-2026-74040 (High): heap buffer overflow → CVE-2026-74045 (High): revoking a user's admin grant didn't invalidate their token. They re-grant themselves admin #CVE
Post summary
Three new CVEs were disclosed for Wazuh, including a critical root RCE, a heap buffer overflow, and an admin token revocation issue.
01011130
55 followersView on X