{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Wazuh ist eine Sicherheitsüberwachungsplattform, die Funktionen wie Intrusion Detection, Log-Analyse und Sicherheitsinformations- und Ereignismanagement (SIEM) bietet.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Wazuh ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- UNIX",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3878 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3878.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3878 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3878"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-27gv-q7q6-f5qh vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-27gv-q7q6-f5qh"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-3xm6-wp5v-2fm9 vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-3xm6-wp5v-2fm9"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-88p6-7cm8-xwj8 vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-88p6-7cm8-xwj8"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-cjf8-wjx6-hjw6 vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-cjf8-wjx6-hjw6"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-crrg-5qvw-8wjx vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-crrg-5qvw-8wjx"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-cw26-jj8q-x7w5 vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-cw26-jj8q-x7w5"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-gc4j-j9fg-4cfr vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-gc4j-j9fg-4cfr"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-qj8j-r988-54rx vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-qj8j-r988-54rx"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-qmhg-366r-jjfp vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-qmhg-366r-jjfp"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-r7hm-43xr-477j vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-r7hm-43xr-477j"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-vc33-wcqf-cwgv vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-vc33-wcqf-cwgv"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-vh8p-3xvw-w536 vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-vh8p-3xvw-w536"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-w4qc-m4j4-6m9c vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-w4qc-m4j4-6m9c"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-x8v7-g49q-ff7j vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-x8v7-g49q-ff7j"
    }, {
      "category" : "external",
      "summary" : "GitHub Security Advisory GHSA-xrjw-cqrv-j92g vom 2026-10-12",
      "url" : "https://github.com/wazuh/wazuh/security/advisories/GHSA-xrjw-cqrv-j92g"
    } ],
    "source_lang" : "en-US",
    "title" : "Wazuh: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-10-13T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-14T09:14:14.860+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3878",
      "initial_release_date" : "2026-10-12T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-12T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2026-10-13T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Referenz(en) aufgenommen: EUVD-2026-98674, EUVD-2026-98679, EUVD-2026-98682, EUVD-2026-98681, EUVD-2026-98680, EUVD-2026-98678, EUVD-2026-98677, EUVD-2026-98675, EUVD-2026-98673, EUVD-2026-98672, EUVD-2026-98671, EUVD-2026-98670, EUVD-2026-98668, EUVD-2026-98669, EUVD-2026-98676"
      } ],
      "status" : "final",
      "version" : "2"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<4.14.8",
          "product" : {
            "name" : "Open Source Wazuh <4.14.8",
            "product_id" : "T061034"
          }
        }, {
          "category" : "product_version",
          "name" : "4.14.8",
          "product" : {
            "name" : "Open Source Wazuh 4.14.8",
            "product_id" : "T061034-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:wazuh:wazuh:4.14.8"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Wazuh"
      } ],
      "category" : "vendor",
      "name" : "Open Source"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-74030",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74030"
  }, {
    "cve" : "CVE-2026-74031",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74031"
  }, {
    "cve" : "CVE-2026-74032",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74032"
  }, {
    "cve" : "CVE-2026-74033",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74033"
  }, {
    "cve" : "CVE-2026-74034",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74034"
  }, {
    "cve" : "CVE-2026-74035",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74035"
  }, {
    "cve" : "CVE-2026-74036",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74036"
  }, {
    "cve" : "CVE-2026-74037",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74037"
  }, {
    "cve" : "CVE-2026-74040",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74040"
  }, {
    "cve" : "CVE-2026-74041",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74041"
  }, {
    "cve" : "CVE-2026-74043",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74043"
  }, {
    "cve" : "CVE-2026-74045",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74045"
  }, {
    "cve" : "CVE-2026-74047",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-74047"
  }, {
    "cve" : "CVE-2026-93346",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-93346"
  }, {
    "cve" : "CVE-2026-93347",
    "product_status" : {
      "known_affected" : [ "T061034" ]
    },
    "release_date" : "2026-10-12T22:00:00.000+00:00",
    "title" : "CVE-2026-93347"
  } ]
}