CVE-2026-112339
5.9 MEDIUMpublic exploit availablePublished 2026-11-06 · Updated 2026-11-11
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Wazuh from 3.9.0 before 4.14.9 contains a missing TLS hostname verification vulnerability in the fluent-forward module's wm_fluent_ssl_ctx() that allows network attackers to impersonate the Fluentd collector by presenting any certificate chaining to the configured ca_file. Attackers who redirect the connection via DNS, ARP, or on-path positions can receive forwarded security telemetry and the shared_key_hexdigest for offline cracking.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-297
Public exploit & PoC references
All references
- https://github.com/wazuh/wazuh/releases/tag/v4.14.9
- https://github.com/wazuh/wazuh/security/advisories/GHSA-v8ww-qhjh-j6w9
- https://www.vulncheck.com/advisories/wazuh-3.9.0-before-4.14.9-missing-tls-hostname-verification-in-fluent-forward-module
- https://github.com/wazuh/wazuh/security/advisories/GHSA-v8ww-qhjh-j6w9
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-102669
- MEDIUMCVE-2026-107660PoC
- MEDIUMCVE-2026-107819PoC
- CRITICALCVE-2026-107938
- HIGHCVE-2026-109408PoC
- UNSCOREDCVE-2026-115758PoC
- UNSCOREDCVE-2026-117666PoC
- HIGHCVE-2026-123848
Related by shared AI tags and CWE weakness class. Browse the full archive.