CVE-2026-67307 | Wazuh up to 5.0.0-beta2 Inventory Sync Start cluster_name/cluster_node input validation

August 1, 2026 Yanac

A vulnerability categorized as critical has been discovered in Wazuh up to 5.0.0-beta2. Affected is the function Home of the component Inventory Sync. Such manipulation of the argument cluster_name/cluster_node leads to improper input validation.

This vulnerability is traded as CVE-2026-67307. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More