THREATOPS
THREAT OPSThreat News › [NVD] CVE-2026-54084 (MEDIUM 5.3) — Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key resp

[NVD] CVE-2026-54084 (MEDIUM 5.3) — Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key resp

mednvdPublished 2026-08-28

CVE-2026-54084 CVSS: 5.3 MEDIUM Published: 2026-08-28T00:18:07.370

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer than four fields, causing a NULL poi

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-54084