Critical CVE-2026-74041 found in Wazuh Manager

INCIBE-CERT disclosed CVE-2026-74041 in Wazuh Manager 4.14.3–4.14.7: an upper-case LOG_FORMAT directive in ossec.conf bypasses the validator and executes as root on reload. The flaw is fixed in version 4.14.8.

• The flaw affects Wazuh Manager 4.14.3 through versions below 4.14.8
• Exploitation requires manager:update_config permission and a service reload
• The fix shipped in Wazuh Manager 4.14.8
• No exploitation in the wild was reported at publication