CVE-2026-26204

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs in GetAlertData, resulting in writing a NULL byte exactly 1 byte before the start of the buffer allocated by strdup. Due to unsigned integer underflow and pointer arithmetic wrapping, the write lands at offset -1 from the buffer, corrupting heap metadata. A malicious actor can potentially leverage this issue through a compromised agent to cause denial of service or heap corruption by injecting a specially crafted alert into the alerts log file monitored by wazuh-logcollector. This issue has been patched in version 4.14.4.

• CWE-124
• CWE-191

• https://github.com/wazuh/wazuh/releases/tag/v4.14.4Release Notes
• https://github.com/wazuh/wazuh/security/advisories/GHSA-j4c7-hwjw-8857Exploit, Vendor Advisory
• https://github.com/wazuh/wazuh/security/advisories/GHSA-j4c7-hwjw-8857Exploit, Vendor Advisory

Published

Apr 29, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-26199HDF5 is a high-performance library and a file format specifi…6.5
• CVE-2026-2620A weakness has been identified in Huace Monitoring and Early…7.3
• CVE-2026-26200HDF5 is software for managing data. Prior to version 1.14.4-…7.8
• CVE-2026-26201emp3r0r is a C2 designed by Linux users for Linux environmen…7.5
• CVE-2026-26202Penpot is an open-source design tool for design and code col…7.5
• CVE-2026-26203PJSIP is a free and open source multimedia communication lib…6.5
• CVE-2026-26205opa-envoy-plugun is a plugin to enforce OPA policies with En…7.1
• CVE-2026-26206Wazuh is a free and open source platform used for threat pre…6.5
• CVE-2026-26207Discourse is an open source discussion platform. Prior to ve…5.4
• CVE-2026-26208ADB Explorer is a fluent UI for ADB on Windows. Prior to Bet…7.8
• CVE-2026-26209cbor2 provides encoding and decoding for the Concise Binary …7.5
• CVE-2026-2621A security vulnerability has been detected in Sciyon Koyuan …7.3