CVE-2026-74034 - Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Command
CVE ID :CVE-2026-74034 Published : Oct. 13, 2026, 2:17 p.m. | 1 hour, 14 minutes ago Description :Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with attacker-controlled file_path. Attackers can...