← Database

CVE-2022-40497

HIGH CVSS: 8.8 Published: 2022-09-28 Modified: 2026-06-17

Description

Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.

Affected Platforms

Wazuh Wazuh

Weakness Type

NVD-CWE-noinfo, CWE-94

References