CVE-2026-112335

Name of the Vulnerable Software and Affected Versions Wazuh agent versions 1.0.0 through 4.14.8

Description A stack-based buffer overflow exists in the logcollector snort-full log reader due to a miscalculation of remaining buffer space in the read snortfull() function. An attacker can trigger this by writing specially crafted multi-line content to a monitored snort-full log, which may overflow the 65,280-byte stack buffer. This can result in the agent crashing or the overwriting of a Structured Exception Handler (SEH)—a mechanism used to handle software errors—on 32-bit Windows agents operating with SYSTEM privileges.

Recommendations Update Wazuh agent to version 4.14.9 or later.