CVE ID :CVE-2026-74035 Published : Oct. 13, 2026, 2:17 p.m. | 1 hour, 14 minutes ago Description :Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places the reserved user guard and password policy inside a falsy truthiness...

#Sicherheitslücke #Update

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-74035 - Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Empty Password in update_user

VERWANDTEARTIKEL

Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images

GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

Ivanti Connect Secure 0-Day Flaw Actively Exploited in the Wild to Execute Arbitrary Commands

Danfoss Refrigeration Hack Update – 4,980 Hosts Found Exposed to Internet

Ivanti warns of Connect Secure zero-day exploited in attacks

CISA Warns of Hackers Exploiting Two Citrix NetScaler 0-Days to Execute Code Remotely