MEDIUMCVSS v3.1 6.5Vulnerability
CVE-2026-112336
Wazuh Manager from 3.0.0 before 4.14.9 contains a memory leak vulnerability in the generic JSON decoder that allows remote attackers to exhaust wazuh-analysisd memory via repeated static fields. Attackers can enroll an agent through passwordless enrollment and send events with duplicate fields such as id, triggering an OOM kill that disables alerting.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-07T06:40:34.987550+00:00
- Cvss score
- 6.5
- Cvss severity
- MEDIUM
- Retrieved at
- 2026-11-07T06:41:39+00:00
- Score
- 6.5
- Last source
- NVD
- Cvss version
- 3.1
- Cve id
- CVE-2026-112336
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- First seen by Signal
- 2026-11-06T18:25:35+00:00
- Name
- CVE-2026-112336
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Published at
- 2026-11-06T15:17:07.890
- Last modified
- 2026-11-06T20:15:23.650
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph