CVE-2026-25772
Wazuh is a free and open source platform used for threat prevention, detection, and response.
Published Mar 17, 2026 · updated Jun 17, 2026 · wazuh wazuh
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module ( ). The SQL query construction logic allows for an integer underflow when calculating the remaining buffer size. This occurs because the code incorrectly aggregates the return value of . If a specific database synchronization payload exceeds the size of the query buffer (2048 bytes), the size calculation wraps around to a massive integer, effectively removing bounds checking for subsequent writes. This allows an attacker to corrupt the stack, leading to a Denial of Service (DoS) or potentially RCE. Version 4.14.3 fixes the issue.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 17, 2026 · NIST NVD
Detected
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module ( ). The SQL query construction logic allows for an integer underflow when calculating the remaining buffer size. This occurs because the code incorrectly
Jun 17, 2026 · NIST NVD
Updated
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module ( ). The SQL query construction logic allows for an integer underflow when calculating the remaining buffer size. This occurs because the code incorrectly
Affected
- cpe wazuh/wazuhversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-25772
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-25772
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module ( ). The SQL quer
nvd.nist.gov