CVE-2026-62365 | Wazuh up to 4.14.6 EventChannel Decoder winevtchannel.c DecodeWinevt heap-based overflow

November 5, 2026 Yanac

A vulnerability was found in Wazuh up to 4.14.6. It has been rated as problematic. This vulnerability affects the function DecodeWinevt of the file src/analysisd/decoders/winevtchannel.c of the component EventChannel Decoder. The manipulation leads to heap-based buffer overflow.

This vulnerability is documented as CVE-2026-62365. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More