Wazuh v4.14.10 released
By SecBurg
Wazuh is an open-source XDR/SIEM platform for endpoint and cloud threat detection.
Version 4.14.10 is out and it is another security-heavy maintenance release.
The manager gets fixes for several path traversal, command injection, memory safety and input validation issues, including a root-level command injection in the rootcheck promiscuous-interface check. The API also received multiple fixes in its RBAC and run_as rules, and credential masking in the configuration output was hardened.
Other highlights:
Manager: warning when the indexer connector or vulnerability scanner queues reach 100,000 items
Manager: new TCP session counter in wazuh-remoted, rule-tree memory limits in wazuh-analysisd
Manager: full vulnerability re-scan now only covers connected agents or those disconnected at startup
Agent: hardening fixes across logcollector, FIM, syscollector and active responses on Linux, macOS, Windows and legacy Unix
Agent: crash fixes on macOS 26 and Solaris 11 SPARC
Agent: logcollector ignores sockets in centralized config unless logcollector.remote_commands is enabled
Ruleset: corrected SCA policies for Debian, Ubuntu and RHEL, including inverted checks
API: login attempt counter no longer resets on every request
API: rule and decoder uploads report detailed validation errors and no longer leave invalid files installed
Check the full release notes and the installation guide for the complete changelog and upgrade instructions.
Happy scanning! :-)