THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-44901 (HIGH 8.4) — Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge() in framework/wazuh/core/results.py trusts the sort_casting field in a cluster worker's JSON response. During a d

[NVD] CVE-2026-44901 (HIGH 8.4) — Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge() in framework/wazuh/core/results.py trusts the sort_casting field in a cluster worker's JSON response. During a d

mednvdPublished 2026-08-19

CVE-2026-44901 CVSS: 8.4 HIGH Published: 2026-08-19T17:18:49.283

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge() in framework/wazuh/core/results.py trusts the sort_casting field in a cluster worker's JSON response. During a distributed API merge, attacker-controlled type names a

Indicators of compromise

CVE-2026-44901cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-44901