CVE-2026-112340

8.2 HIGHpublic exploit available

Published 2026-11-06 · Updated 2026-11-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows authenticated dashboard users to override the Manager API Authorization header via the /api/request proxy endpoint. Attackers can supply nested body.headers.Authorization values that replace the server-side session Bearer token, letting them act as another Manager API identity or send unauthenticated upstream requests.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Weaknesses

CWE-863

Public exploit & PoC references

https://github.com/wazuh/wazuh/releases/tag/v4.14.9
https://github.com/wazuh/wazuh/security/advisories/GHSA-7rvv-9467-96mc
https://github.com/wazuh/wazuh/security/advisories/GHSA-7rvv-9467-96mc

All references

https://github.com/wazuh/wazuh/releases/tag/v4.14.9
https://github.com/wazuh/wazuh/security/advisories/GHSA-7rvv-9467-96mc
https://www.vulncheck.com/advisories/wazuh-4.9.0-before-4.14.9-authorization-header-override-via-api-request
https://github.com/wazuh/wazuh/security/advisories/GHSA-7rvv-9467-96mc

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2024-22031PoC
MEDIUMCVE-2025-13050PoC
UNSCOREDCVE-2025-68392
HIGHCVE-2026-100105
MEDIUMCVE-2026-100145
UNSCOREDCVE-2026-100252
MEDIUMCVE-2026-100259
HIGHCVE-2026-100262

Related by shared AI tags and CWE weakness class. Browse the full archive.