PT-2026-28460 · Wazuh · Wazuh+1

Published 2026-03-27 · Updated 2026-05-08 · CVE-2026-32983

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions wazuh-manager versions prior to 4.7.4

Description The authd service in Wazuh Manager contains an improper restriction of client-initiated SSL/TLS renegotiation. This allows remote attackers to cause a denial of service by sending excessive renegotiation requests, consuming CPU resources and rendering the authd service unavailable.

Recommendations Update to version 4.7.4 or later.

Fix

DoS

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2026-32983

Affected Products

Wazuh

Wazuh Manager

References · 5

• https://github.com/wazuh/wazuh/security/advisories/GHSA-rr83-v9v7-jjhp · Vendor Advisory
• https://github.com/advisories/GHSA-rr83-v9v7-jjhp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32983 · Security Note
• https://t.me/cveNotify/162719 · Telegram Post
• https://vulncheck.com/advisories/ssl-tls-renegotiation-dos-in-wazuh-manager-authd-service · Note