
Saad Fellahi@SaadFellahii
Disclosure
3 CVEs published in Wazuh. That puts me at 10 total. → CVE-2026-74037 (Critical): Root RCE on the manager → CVE-2026-74040 (High): heap buffer overflow → CVE-2026-74045 (High): revoking a user's admin grant didn't invalidate their token. They re-grant themselves admin #CVE
Post summary
The user announces three newly published CVEs in Wazuh, giving their severity levels and brief technical details, with no indication of PoC, active exploitation, or patches.
01011130
55 followersView on X
