THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-61802 (MEDIUM 6.5) — Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST AP

[NVD] CVE-2026-61802 (MEDIUM 6.5) — Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST AP

mednvdPublished 2026-08-28

CVE-2026-61802 CVSS: 6.5 MEDIUM Published: 2026-08-28T02:16:21.907

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST API provides a masking control, mask_sensitive_config,

Indicators of compromise

CVE-2026-61802cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-61802