https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 17:44:49 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-74032 <p>Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog by querying unprotected security endpoints. Attackers can request GET /security/actions and /security/resources, which omit the caller&#39;s RBAC policies, to map privileged actions and endpoints for privilege escalation planning.</p> <p>Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog by querying unprotected security endpoints. Attackers can request GET /security/actions and /security/resources, which omit the caller&#39;s RBAC policies, to map privileged actions and endpoints for privilege escalation planning.</p> https://db.gcve.eu/vuln/fkie_cve-2026-74032