CVE-2026-112337 | Wazuh up to 4.14.8 Azure wodle get_graph_events nextLink server-side request forgery

November 6, 2026 Yanac

A vulnerability marked as problematic has been reported in Wazuh up to 4.14.8. This affects the function get_graph_events of the component Azure wodle. The manipulation of the argument nextLink leads to server-side request forgery.

This vulnerability is traded as CVE-2026-112337. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More