- How many CVEs does wazuh have?
- wazuh has 93 published CVE records since 2018, including 83 in the last two years.
- How many wazuh CVEs are in CISA KEV?
- Yes — 1 of wazuh's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which wazuh products have the most CVEs?
- The wazuh products with the most published CVEs are wazuh, wazuh-manager, wazuh-agent, github.com/wazuh/wazuh, wazuh-dashboard-plugins.
- What are the most common weakness types in wazuh CVEs?
- wazuh's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-122 (Heap-based Buffer Overflow), CWE-121 (Stack-based Buffer Overflow), CWE-863 (Incorrect Authorization).
- Are there public exploits for wazuh vulnerabilities?
- Yes — 79 of wazuh's CVEs have a known public exploit.
- How many critical wazuh vulnerabilities are there?
- wazuh has 16 critical and 40 high-severity CVEs.
- What is the average severity of wazuh CVEs?
- The average CVSS base score across wazuh's scored CVEs is 7.3.