Stack-based Buffer Overflow in Wazuh's Remote Service

CVE-2026-28221

What is CVE-2026-28221?

A stack-based buffer overflow vulnerability exists in Wazuh's remote service that allows attackers to exploit the system through improperly formatted attacker-controlled bytes. This issue can lead to out-of-bounds writes past a fixed-sized stack buffer when processing oversized messages, which may result in remote log amplification attacks that degrade monitoring capabilities. The vulnerability can be triggered without authentication, making it particularly critical for systems that haven't been updated to version 4.14.4 where this issue has been patched. For detailed technical insights and mitigation steps, refer to the official advisories.

References