Brute-force Protection Bypass in Wazuh Server API

CVE-2026-26206

What is CVE-2026-26206?

Wazuh, an open-source platform for threat prevention, detection, and response, contains a vulnerability in its server API affecting versions 4.0.0 to 4.14.3. This vulnerability allows attackers to bypass brute-force protection mechanisms for the POST /security/user/authenticate endpoint. By sending multiple concurrent authentication requests, an attacker can exceed the predetermined maximum login attempts, resulting in an increased success rate for password guessing attacks. The issue has been rectified in version 4.14.4, emphasizing the importance of updating for maintaining robust security.

References