https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T08:56:41.007944+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-74041 fkie_cve-2026-74041 2026-10-14T08:56:41.018814+00:00

Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:update_config can inject an uppercase LOG_FORMAT command localfile that the collector runs as root on reload.