{"id":8161,"date":"2025-07-14T09:34:52","date_gmt":"2025-07-14T09:34:52","guid":{"rendered":"http:\/\/localhost\/?p=8161"},"modified":"2025-07-14T09:34:52","modified_gmt":"2025-07-14T09:34:52","slug":"exploit-for-deserialization-of-untrusted-data-in-wazuh","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=8161","title":{"rendered":"Exploit for Deserialization of Untrusted Data in Wazuh"},"content":{"rendered":"

Exploit Details<\/h2>\n

Basic Information<\/h3>\n\n\n\n\n\n\n
Exploit Title<\/th>\nExploit for Deserialization of Untrusted Data in Wazuh<\/td>\n<\/tr>\n
Exploit ID<\/th>\n42A05D19-6644-5104-B96C-05FDFDC8A776<\/td>\n<\/tr>\n
Type<\/th>\ngithubexploit<\/td>\n<\/tr>\n
Published<\/th>\n2025-07-13T23:56:54<\/td>\n<\/tr>\n
Modified<\/th>\n2025-07-14T13:34:22<\/td>\n<\/tr>\n<\/table>\n

CVSS Information<\/h3>\n\n\n\n\n
CVSS Score<\/th>\n9.9<\/td>\n<\/tr>\n
Severity<\/th>\nCRITICAL<\/td>\n<\/tr>\n
Vector<\/th>\nCVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:H\/A:H<\/td>\n<\/tr>\n<\/table>\n

AI Analysis<\/h3>\n\n\n\n\n\n\n\n
AI Description<\/th>\nThis vulnerability allows attackers to exploit deserialization of untrusted data in Wazuh, potentially leading to remote code execution. It is critical due to its high CVSS score and the widespread use of Wazuh in security monitoring environments.<\/td>\n<\/tr>\n
AI Severity<\/th>\nCritical<\/td>\n<\/tr>\n
AI Vendor<\/th>\nWazuh Inc.<\/td>\n<\/tr>\n
AI Product<\/th>\nWazuh<\/td>\n<\/tr>\n
AI Version<\/th>\nNot specified<\/td>\n<\/tr>\n
AI Score<\/th>\n9.9<\/td>\n<\/tr>\n<\/table>\n

CVE Information<\/h3>\n
\n