Vendor

Wazuh

No CISA KEV deadline is open. CISA last added a Wazuh CVE on 10 Jun 2025.

Tracked since 11 Aug · latest article Tue 13 Oct · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 1 in the full CISA catalogue · all time
High exploit odds · current: 0; EPSS top 5%, not in KEV
Articles · 7 days: 0; none this week

Exploited, by due date

CSV download

CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2025-24016not in CyberSIXT coverageWazuh Server10 Jun 2025Deadline passed 1 Jul 2025

Products

3 products · 6 CVEs in coverage

Server0 CVEs · 1 in KEV manager3 CVEs · 0 in KEVlatest 13 Oct

Several products3 CVEs · 0 in KEVlatest 11 Aug

Trends

Added to CISA KEV per quarter

Q1 2025Q4 2026

Show as table

Added to CISA KEV per quarter
Period	Count
Q1 2025	0
Q2 2025	1
Q3 2025	0
Q4 2025	0
Q1 2026	0
Q2 2026	0
Q3 2026	0
Q4 2026	0

CVEs in coverage by publication month

Publication dates are still being collected (3 of 6).

FIRST EPSS percentiles across CVEs in coverage

05095 · 100th percentile

Show as table

FIRST EPSS percentiles across CVEs in coverage
CVE	EPSS percentile
CVE-2026-48024	55.7
CVE-2026-49441	55.5
CVE-2026-74040	53.5
CVE-2026-48162	50.9
CVE-2026-74041	39.4
CVE-2026-74034	37.4

Fix listed for 3 of 6 CVEs in coverage.

Coverage

2 articles · all timeFull timeline

Two articles so far, 11 Aug to 13 Oct.

1 2

Tue 11 Aug · first reportCritical Wazuh Flaws Allow Root Access via Cluster KeySecurityOnline
Tue 13 OctWazuh fixes 15 flaws that could let attackers take over deploymentsSecurityOnline

All CVEs in coverage

CVE-2026-48024Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh managerCVSS9.1Critical–Not in KEV0.8%EPSS1article

CVE-2026-49441Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh managerCVSS9.1Critical–Not in KEV0.8%EPSS1article

CVE-2026-74040wazuh-manager vulnerabilityCVSS9.4Critical–Not in KEV0.7%EPSS1article

CVE-2026-48162Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh managerCVSS9.1Critical–Not in KEV0.7%EPSS1article

CVE-2026-74041wazuh-manager vulnerabilityCVSS9.4Critical–Not in KEV0.5%EPSS1article

CVE-2026-74034wazuh-manager vulnerabilityCVSS8.7High–Not in KEV0.4%EPSS1article

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

Wazuh

Exploited, by due date

Products

Trends

Coverage

All CVEs in coverage

On this device

Intel

Settings

Keyboard shortcuts