CVE-2026-44256 | Wazuh up to 4.14.5/5.0.0-beta1 API Authentication api/api/middlewares.py Username escape output

August 19, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Wazuh up to 4.14.5/5.0.0-beta1. This affects an unknown part of the file api/api/middlewares.py of the component API Authentication. Performing a manipulation of the argument Username results in escaping of output.

This vulnerability is cataloged as CVE-2026-44256. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More