PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← Back | CVE Intelligence Hub

CVE-2026-25769

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-25769.

Coverage Span
2026-03-17
Reports
1 related reports

Associated Reports & Timeline

1.
CVE-2026-25769: RCE via insecure deserialization in wazuh cluster - remote command execution through cluster protocol
yokai.hakaisecurity.io | vulnerability | | Original ↗ | .md | #rce | #vulnerability-research | #deserialization | #research
Abstract In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.1 that allows arbitrary command execution on the master node through insecure deserialization in the cluster communication protocol. The vulnerability stems from the lack of validation in the as_wazuh_object() function, which automatically imports […]