CVE ID :CVE-2026-112339 Published : Nov. 6, 2026, 3:17 p.m. | 1 hour, 53 minutes ago Description :Wazuh from 3.9.0 before 4.14.9 contains a missing TLS hostname verification vulnerability in the fluent-forward module's wm_fluent_ssl_ctx() that allows network attackers to impersonate the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-112339 - Wazuh 3.9.0 before 4.14.9 Missing TLS Hostname Verification in fluent-forward Module

VERWANDTEARTIKEL

CVE-2026-123792 - Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process

CVE-2026-123623 - Grida through 0.0.24 Missing Authorization in Forms File-Preview API

CVE-2026-123675 - OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection

CVE-2026-121623 - Symfony: DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File

CVE-2026-118515 - Symfony: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server File

CVE-2026-123859 - SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)