THREAT OPS › Threat News › [NVD] CVE-2026-54083 (HIGH 8.1) — Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as r
[NVD] CVE-2026-54083 (HIGH 8.1) — Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as r
CVE-2026-54083 CVSS: 8.1 HIGH Published: 2026-08-28T00:18:07.233
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script builds a file path by concatenating th
MITRE ATT&CK techniques
- CredentialsT1589.001
Indicators of compromise
- CVE-2026-54083cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-54083