CVE-2026-74030

4.9 MEDIUMpublic exploit available

Published 2026-10-13 · Updated 2026-10-13

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Wazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2json_node that allows a manager-controlled policy to exhaust agent memory. Attackers controlling the manager can push a small SCA policy with nested aliases via merged.mg to OOM-kill wazuh-modulesd on every agent in a group.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-776

Public exploit & PoC references

https://github.com/wazuh/wazuh/releases/tag/v4.14.8
https://github.com/wazuh/wazuh/security/advisories/GHSA-x8v7-g49q-ff7j

All references

https://github.com/wazuh/wazuh/releases/tag/v4.14.8
https://github.com/wazuh/wazuh/security/advisories/GHSA-x8v7-g49q-ff7j
https://www.vulncheck.com/advisories/wazuh-3.9.0-before-4.14.8-memory-exhaustion-via-sca-yaml-alias-expansion

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-108039
MEDIUMCVE-2026-111252PoC
MEDIUMCVE-2026-92001

Related by shared AI tags and CWE weakness class. Browse the full archive.