CVE-2026-61802 | Wazuh up to 4.14.6 Cluster Configuration /cluster/local/config read_config_wrapper missing encryption

A vulnerability was found in Wazuh up to 4.14.6. It has been classified as problematic. The affected element is the function read_config_wrapper of the file /cluster/local/config of the component Cluster Configuration. This manipulation causes missing encryption of sensitive data.

This vulnerability is tracked as CVE-2026-61802. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More