What’s Vulnerable › Vulnerabilities
CVE-2022-40497
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-09-28 · updated 2026-06-17
- Weakness: CWE-94
Description
Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.
Affected products
- wazuh: from 3.6.1 through 3.13.5; from 4.0.0 through 4.2.7; from 4.3.0 through 4.3.7
References
Get alerted when CVE-2022-40497 or the next vulnerability affects your stack