CVE-2026-74041 — Wazuh 4.14.3 before 4.14.8 Remote Command Validation Bypass via Case Mismatch
Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated us…
Published: 2026-10-13 · CVSS: 9.4 · CVSS 4.0
Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:update_config can inject an uppercase LOG_FORMAT command localfile that the collector runs as root on reload.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7