CVE-2026-112336

MEDIUM 6.5

Wazuh Manager 3.0.0 before 4.14.9 Memory Leak DoS via JSON Decoder

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote attackers to exhaust wazuh-analysisd memory via repeated static fields. Attackers can enroll an agent through passwordless enrollment and send events with duplicate fields such as id, triggering an OOM kill that disables alerting.

CWE	CWE-401
Vendor	wazuh
Product	wazuh
Published	Nov 6, 2026

Stay Ahead of the Next One

Get instant alerts for wazuh wazuh

Be the first to know when new medium vulnerabilities affecting wazuh wazuh are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

wazuh / wazuh

3.0.0 < 4.14.9

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/wazuh/wazuh/security/advisories/GHSA-6w6h-fwqm-6hjj github.com: https://github.com/wazuh/wazuh/commit/7fdd928228fa0478814277ab3e49bda9809cd50a github.com: https://github.com/wazuh/wazuh/commit/c7df52ee8158577e7bd830e2b84d024612561f8b github.com: https://github.com/wazuh/wazuh/releases/tag/v4.14.9 vulncheck.com: https://www.vulncheck.com/advisories/wazuh-manager-3.0.0-before-4.14.9-memory-leak-dos-via-json-decoder

Credits

n01e0 vikman90