CVE-2026-32984

low
Published 2026-03-27 · Modified 2026-05-26
CVSS v3
3.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v2
VIR risk
3.5

Description

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low impact on the availability of the authentication daemon.

Predictions

Exploit likelihood
45%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact

VendorProductVersionsFixed
wazuhwazuh{"endIncluding":"3.5.0"}
wazuhwazuh4.3.10

References

CWEs

CWE-125

Verify integrity in audit chain (admin only). AS-IS.