CVE ID :CVE-2026-56699 Published : July 15, 2026, 12:18 p.m. | 16 minutes ago Description :Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-56699 - Wazuh Manager - NDJSON Injection in inventory_sync via Agent-Controlled DataValue.index

VERWANDTEARTIKEL

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

CVE-2026-61873 - Grav before 9.1.8 Arbitrary File Write via Twig-Processed Filename

CVE-2026-61457 - Grav before 1.0.3 Remote Code Execution via File Upload Extension Bypass

CVE-2026-61443 - PraisonAI before 1.6.78 Remote Code Execution via SkillTools

CVE-2026-61451 - Grav before 1.0.4 Password Reset Token Poisoning via admin_base_url

CVE-2026-61430 - PraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawl