vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-74045

Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder

HIGH
7.1
CVSS Score
Published: October 13, 2026 at 01:27 PM UTC
Updated: October 26, 2026 at 02:15 PM UTC
1 product affected across 1 vendorWazuh

Using wazuh-manager by Wazuh?

Get instant alerts when new vulnerabilities affect wazuh-manager - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.1
Exploit prediction
EPSS 0.3%
SSVC
PoC

Description

Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from input but written bounded by OS_MAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a fleet-wide detection outage.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Wazuh· Wazuh
90%
3.12.0
Vendor states this is fixed in 4.14.8 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

Vendor Advisory
Source: cverecord
https://github.com/wazuh/wazuh/security/advisories/GHSA-gc4j-j9fg-4cfr
PatchRelease Notes
Source: cverecord
https://github.com/wazuh/wazuh/releases/tag/v4.14.8
Third Party Advisory
Source: cverecord
https://www.vulncheck.com/advisories/wazuh-3.12.0-before-4.14.8-heap-buffer-overflow-in-wazuh-analysisd-fim-decoder

SSVC — Action Prioritization

SSVCPoCNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.1HIGHVulnCheck
Vector?

Quick Info

StatusAWAITING ANALYSIS
CWE
CWE-122

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card