PT-2026-28460 · Wazuh · Wazuh Manager

CVE-2026-32983 · Published 2026-03-27 · Updated 2026-05-08

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions wazuh-manager versions prior to 4.7.4

Description The authd service in Wazuh Manager contains an improper restriction of client-initiated SSL/TLS renegotiation. This allows remote attackers to cause a denial of service by sending excessive renegotiation requests, consuming CPU resources and rendering the authd service unavailable.

Recommendations Update to version 4.7.4 or later.

Exploit

Fix

DoS

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2026-32983

GHSA-RR83-V9V7-JJHP

Affected Products

Wazuh Manager

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32983.json · Exploit
• https://github.com/wazuh/wazuh/security/advisories/GHSA-rr83-v9v7-jjhp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-32983 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32983 · Security Note
• https://github.com/advisories/GHSA-rr83-v9v7-jjhp · Vendor Advisory
• https://vulncheck.com/advisories/ssl-tls-renegotiation-dos-in-wazuh-manager-authd-service · Note
• https://t.me/cveNotify/162719 · Telegram Post