Heap Buffer Overflow Vulnerability in Wazuh Authentication Daemon
CVE-2026-32984

5.3MEDIUM

Key Information:

Vendor

Wazuh

Status
Wazuh
Vendor
CVE Published:
27 March 2026

What is CVE-2026-32984?

Wazuh's authentication daemon, authd, is vulnerable to a heap buffer overflow that could be exploited through specially crafted input. Attackers can leverage this vulnerability to induce memory corruption, potentially leading to a denial of service. The impact includes diminished availability of the authentication service, making systems that rely on authd susceptible to interruptions and disruptions.

Affected Version(s)

Wazuh Linux 3.5.0

Wazuh Linux 4.3.10

References

https://github.com/advisories/GHSA-grjq-p5fg-m24r
vendor-advisory
https://www.vulncheck.com/advisories/heap-buffer-overflow...
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Reported by @vikman90; credited to @stasos24.
.