THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-54085 (HIGH 7.1) — Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their f

[NVD] CVE-2026-54085 (HIGH 7.1) — Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their f

mednvdPublished 2026-08-28

CVE-2026-54085 CVSS: 7.1 HIGH Published: 2026-08-28T00:18:07.520

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing argument injection into tools that run

Indicators of compromise

CVE-2026-54085cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-54085