Secuno
ENNL
Book demo

CVE-2026-45798

7.5 HIGHPublic exploitEPSS 0.50%
  1. Published19 Aug 2026

Description

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, compare_wazuh_versions() in src/shared/version_op.c copies the attacker-controlled enrollment V: field into a 10-byte stack buffer with strncpy() but does not explicitly terminate the buffer. The function is reachable before authentication through wazuh-authd on TCP port 1515 when anonymous TLS enrollment is enabled. A version string of at least nine non-null bytes can cause strchr() and strtok() to read beyond ver2 and can make strtok() write a null byte into adjacent stack memory, allowing a remote denial of service. This issue is fixed in versions 4.14.6 and 5.0.0-beta2.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Wazuh Wazuh≥ 4.5.0 < 4.14.6 · 5.0.0

Remediation

Fixed in
Wazuh Wazuh≥ 4.14.6

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-910039.1
A flaw has been found in D-Link DI-8300 16.07. The affected element is the function…
CVE-2026-910019.9
A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function…
CVE-2026-906939.9
A flaw has been found in D-Link DIR-878 120B05. This impacts the function…
CVE-2026-906929.9
A vulnerability was detected in D-Link DIR-878 120B05. This affects the function…
CVE-2026-906898.8
A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC.…
CVE-2023-462738.8
Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before…

Frequently asked

Is CVE-2026-45798 being actively exploited?

CVE-2026-45798 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 0.50%.

How severe is CVE-2026-45798?

CVE-2026-45798 has a CVSS 3.1 base score of 7.5, rated high. EPSS estimates a 0.50% probability of exploitation.

Which products are affected by CVE-2026-45798?

Affected products include Wazuh Wazuh.

How do I fix CVE-2026-45798?

Upgrade affected software to a fixed version, for example Wazuh Wazuh 4.14.6 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-45798 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.