If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews

Search

Find merged stories by title or summary.

Vulnerabilities & Patches
Emerging1 src

CVE-2026-74046 - Wazuh 4.4.0 4.14.7 DoS via fdecompress_files() Zip Bomb

CVE ID : CVE-2026-74046 Published : Aug. 18, 2026, 6:19 p. m. • 48 minutes ago Description : Wazuh 4. 4. 0 before 4. 14. 7 contains a denial of service vulnerability in the fdecompress_files() function within cluster. py that allows authenticated cluster peers to exhaust memory by supplying a malicious synchronization archive without decompressed size limits. Attackers holding a valid cluster Fernet key can upload a small, highly compressed zip bomb archive that forces wazuh-clusterd on the master node to decompress the full payload into memory, causing memory exhaustion and service disruption. Severity: 6.9 • MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

·CVEFeed
Read →

You've reached the end of current stories for this search.