CVE-2026-74047: Wazuh Wazuh-Manager

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth component configuration for pseudo-agent ID 000 to obtain the secret and enroll rogue agents against the manager.

Affected products

• Wazuh Wazuh-Manager: from 4.0.0, before 4.14.8 (fixed in 4.14.8)

Published 2026-10-13. Last modified 2026-10-15.