Wazuh
In 5 briefs, most recently 23 September 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
1 Wazuh vulnerability is on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2025-24016 Wazuh Server Deserialization of Untrusted Data Vulnerability
Coverage in DanSec Daily
- The ShinyHunters FBI breach claim, the F5 BIG-IP APM zero-day CVE-2026-94127, and the Miljödata GDPR fine, plus other vulnerabilities and threat actor activity.
- Erie Insurance cyberattack, INTERPOL's Operation Secure takedown of infostealer infrastructure, and a Microsoft WebDAV zero-day exploited by Stealth Falcon.
- Sensata and UNFI breaches, critical Roundcube RCE CVE-2025-49113 actively exploited, and a Wazuh flaw exploited by Mirai botnets.
- Marks & Spencer cyberattack disrupting operations, Coinbase breach hitting 69,461 customers, and the Lumma infostealer takedown.
- Gladinet Triofox/CentreStack RCE under active exploitation, Hertz breach via Cleo zero-day theft, and Fortinet zero-day exploit chatter.