Detections
Analytics
Wazuh Server 1.0.0 < 4.14.6 Out-of-Bounds Write (CVE-2026-44254)
medium Nessus Plugin ID 339364
Synopsis
The remote host contains a threat prevention, detection, and response platform that is affected by an out-of-bounds write vulnerability.Description
The version of Wazuh Server on the remote host is at least 1.0.0 and prior to 4.14.6. It is, therefore, affected by an out-of-bounds write vulnerability:- HandleSecureMessage() passes a pointer inside its stack buffer to ReadSecMSG(), which decompresses up to OS_MAXSTR bytes at that offset. An encrypted agent message that expands to 65,536 bytes causes a null byte to be written beyond the destination buffer, crashing the root-level remoted daemon and disrupting agent communications. (CVE-2026-44254)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Wazuh Server version 4.14.6 or later.See Also
Plugin Details
Severity: Medium
ID: 339364
File Name: wazuh_server_CVE-2026-44254.nasl
Version: 1.1
Type: Local
Agent: unix
Family: Misc.
Published: 8/25/2026
Updated: 8/25/2026
Configuration: Enable thorough checks (optional)
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.65
CVSS v2
Risk Factor: Medium
Base Score: 4.9
Vector: CVSS2#AV:N/AC:H/Au:S/C:N/I:N/A:C
CVSS Score Source: CVE-2026-44254
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability Information
CPE: cpe:/a:wazuh:wazuh
Required KB Items: installed_sw/Wazuh-Manager
Patch Publication Date: 8/7/2026
Vulnerability Publication Date: 8/7/2026
Reference Information
CVE: CVE-2026-44254