CVE-2026-112335Medium· 5.5▾ SunlitWazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcollector snort-full log reader that miscalculates remaining buffer space in read_snortfull(). Attackers who write crafted multi-line content to a moni…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
Wazuh agent from 1.0.0 before 4.14.9 contains a stack-based buffer overflow in the logcollector snort-full log reader that miscalculates remaining buffer space in read_snortfull(). Attackers who write crafted multi-line content to a monitored snort-full log can overflow the 65,280-byte stack buffer, crashing the agent or overwriting an SEH handler on 32-bit Windows agents running as SYSTEM.
wazuh >= 1.0.0 < 4.14.9Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112334Medium· 4.9Wazuh 1.0.0 before 4.14.9 Out-of-Bounds Write in wazuh-execd via ar.conf
CVE-2026-112336Medium· 6.5Wazuh Manager 3.0.0 before 4.14.9 Memory Leak DoS via JSON Decoder
CVE-2026-112337Low· 3.7Wazuh 3.7.0 before 4.14.9 SSRF via Azure Graph nextLink Pagination
CVE-2026-112338Medium· 5.9Wazuh from 4.3.0 before 4.14.9 SSRF via GitHub Module Link Pagination
CVE-2026-112339Medium· 5.9Wazuh 3.9.0 before 4.14.9 Missing TLS Hostname Verification in fluent-forward Module
CVE-2026-112341Medium· 6.5Wazuh before 4.14.9 SQL Injection via WazuhDBBackend _substitute_params