Post

CVE-2026-74043 - wazuh-manager The Wazuh manager (versions 4.1.1 through 4.14.7) lets anyone with the cluster key send specially crafted upload requests that include ".." in the filename. This lets the… Too many irrelevant or confusing CVEs? Use stackflag.com #wazuhmanager #wazuh #CVE #infosec

stackflag.comCVE-2026-74043: Wazuh Manager allows unauthorized file write via uploadThe Wazuh manager (versions 4.1.1 through 4.14.7) lets anyone with the cluster key send specially crafted upload requests that include ".." in the filename.

1 repost0 likes

Path traversal is a serious risk for Wazuh users on v4.1.1–4.14.7. Time to patch and ensure cluster keys aren't exposed! Thanks for the timely heads-up. #infosec #Wazuh