CVE-2026-41499 | Wazuh up to 4.14.3 remoted_op.c parse_uname_string buffer underflow

April 29, 2026 Yanac

A vulnerability classified as problematic has been found in Wazuh up to 4.14.3. The impacted element is the function parse_uname_string of the file remoted_op.c. The manipulation leads to buffer underwrite.

This vulnerability is documented as CVE-2026-41499. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More