PT-2025-39698 · Wazuh · Wazuh

Published 2025-09-26 · Updated 2025-10-16 · CVE-2025-59938

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.8.0 through 4.10.9

Description Wazuh, a platform for threat prevention, detection, and response, contains a heap buffer overflow in the wazuh-analysisd component. This issue occurs when parsing XML elements received from Windows EventChannel messages.

Recommendations Update to version 4.11.0 or later.

Exploit

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2025-14831

CVE-2025-59938

GHSA-VW3R-MJG3-9HH2

Affected Products

Wazuh

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59938.json · Exploit
• https://github.com/wazuh/wazuh/security/advisories/GHSA-vw3r-mjg3-9hh2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-59938 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59938 · Security Note
• https://bdu.fstec.ru/vul/2025-14831 · Security Note
• https://t.me/cveNotify/139012 · Telegram Post
• https://t.me/cveNotify/136672 · Telegram Post
• https://t.me/CVEtracker/33513 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1971780937261199448 · Twitter Post