VYPR
High severity8.8NVD Advisory· Published Sep 28, 2022· Updated Jun 17, 2026

CVE-2022-40497

CVE-2022-40497

Description

Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Wazuh/Wazuh3 versions
    cpe:2.3:a:wazuh:wazuh:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:wazuh:wazuh:*:*:*:*:*:*:*:*range: >=3.6.1,<=3.13.5
    • (no CPE)
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.