Wazuh Wazuh-Agent vulnerabilities

2 CVEs affecting Wazuh Wazuh-Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-74036, published 2026-10-13.

More from Wazuh.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-74036, published 2026-10-13. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration source. Attackers controlling a manager can…
• CVE-2026-74030, published 2026-10-13. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. Wazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2json_node that allows a manager-controlled policy to exhaust agent memory. Attackers controlling the…