CVE-2026-56699 | Wazuh up to 5.0.0-beta2 OpenSearch Bulk Request Builder DataValue.index injection

July 15, 2026 Yanac

A vulnerability described as very critical has been identified in Wazuh up to 5.0.0-beta2. This affects an unknown part of the component OpenSearch Bulk Request Builder. Executing a manipulation of the argument DataValue.index can lead to injection.

This vulnerability is handled as CVE-2026-56699. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More