CVE-2026-45798

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, compare_wazuh_versions() in src/shared/version_op.c copies the attacker-controlled enrollment V: field into a 10-byte stack buffer with strncpy() but does not explicitly terminate the buffer. The function is reachable before authentication through wazuh-authd on TCP port 1515 when anonymous TLS enrollment is enabled. A version string of at least nine non-null bytes can cause strchr() and strtok() to read beyond ver2 and can make strtok() write a null byte into adjacent stack memory, allowing a remote denial of service. This issue is fixed in versions 4.14.6 and 5.0.0-beta2.

• CWE-121
• CWE-170

• https://github.com/wazuh/wazuh/commit/b6aac379982d6144b8da38450cbea6c8dc15be44Patch
• https://github.com/wazuh/wazuh/pull/36059Issue Tracking, Patch
• https://github.com/wazuh/wazuh/releases/tag/v4.14.6Patch, Release Notes
• https://github.com/wazuh/wazuh/releases/tag/v5.0.0-beta2Patch, Release Notes
• https://github.com/wazuh/wazuh/security/advisories/GHSA-4fvp-jfc3-qr6rExploit, Vendor Advisory

Published

Aug 19, 2026

Last Modified

Sep 15, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45792rtk filters and compresses command outputs before they reach…5.5
• CVE-2026-45793Composer is a dependency Manager for the PHP language. Prior…7.5
• CVE-2026-45794Open Access Management (OpenAM) is an access management solu…7.7
• CVE-2026-45795The Janssen Project is an open-source identity and access ma…5.3
• CVE-2026-45796Coder allows organizations to provision remote development e…6.5
• CVE-2026-45797HeyForm is an open-source form builder. Prior to version 3.0…6.4
• CVE-2026-45799Wire provides gRPC and protocol buffers for Android, Kotlin,…7.5
• CVE-2026-4580A security flaw has been discovered in code-projects Simple …9.8
• CVE-2026-45800Vvveb is a powerful and easy to use CMS with page builder to…8.7
• CVE-2026-45802FPDI is a collection of PHP classes that facilitate reading …6
• CVE-2026-45803`gh` is GitHub’s official command line tool. From 1.6.0 to b…3.5
• CVE-2026-45804Diffusers is the a library for pretrained diffusion models. …7.5