Wazuh (@wazuh) header
Wazuh (@wazuh) profile picture

Unified XDR and SIEM protection for endpoints and cloud workloads. Building Free and Open Source Cybersecurity, for Everyone.

Campbell
Joined January 2016
Photo by Wazuh (@wazuh)Photo by Wazuh (@wazuh)Photo by Wazuh (@wazuh)Photo by Wazuh (@wazuh)Photo by Wazuh (@wazuh)Photo by Wazuh (@wazuh)Photo by Wazuh (@wazuh)Photo by Wazuh (@wazuh)Photo by Wazuh (@wazuh)Photo by Wazuh (@wazuh)
PHP2Shell (CVE-2026-109618, CVE-2026-109619) lets unauthenticated attackers run code on vulnerable PHP web servers. Learn how to detect PHP2Shell remote code execution with Wazuh. Read on: ow.ly/anfQ510224X
1
8
26
1,588
PHP is affected by CVE-2026-109619 (CVSS 9.2 - Critical), a use-after-free flaw that can allow unauthenticated remote code execution. Upgrade to 8.5.12, 8.4.27, 8.3.36, or 8.2.35. Read more: ow.ly/P54C5101rKP
2
9
1
34
3,386
GitLab CE/EE is affected by CVE-2026-97229 (CVSS 10.0 - Critical), a CI/CD regular expression flaw that can allow unauthenticated RCE. Upgrade to 19.2.8, 19.3.5, or 19.4.2. Read more: ow.ly/thh550ZZjpe
7
18
1,089
🌎 3 celebrations, 1 global Wazuh community! 🗓️Nov 26 🇦🇷Buenos Aires: ow.ly/7eX450ZYTxj 🇪🇸Madrid: ow.ly/33K450ZYTxm 🗓️Nov 27 🌐 Online: ow.ly/fw0N50ZYTxk Let’s celebrate our community! 🥂 #OpenSource #cybersecurity
5
15
885
REVSTEALER targets credentials and cryptocurrency wallets on Windows. Learn how Wazuh detects REVSTEALER activity and removes known malicious files from monitored folders. Read on: ow.ly/y60J50ZXWbv
7
8
632
Apache HTTP Server is affected by CVE-2026-59797 (CVSS 9.8 - Critical), a mod_ssl flaw that can bypass SSLRequire access restrictions. Upgrade to 2.4.69+. Read more: ow.ly/Ayju50ZXaqs
10
1
35
1,565
Attackers with sufficient privileges can abuse eBPF attachment points to intercept credentials, terminate tracing tools, or block traffic. See how Wazuh detects unapproved eBPF programs across PAM, ptrace, XDP, and cgroups. Read on: ow.ly/VPU950ZVW9A
11
31
1,135
Wazuh 5.0 Release Candidate 1 is here 🚀 Our biggest platform release to date is now available as RC 1, a more mature release ready for hands-on testing ahead of general availability. General availability is coming soon. Learn more: lnkd.in/erR6fgNc
44
1
223
14,209
Citrix NetScaler ADC and Gateway are affected by CVE-2026-88773 (CVSS 10.0 - Critical), an unauthenticated HTTP request smuggling flaw. Upgrade to the applicable fixed version now. Read more: ow.ly/6Mk850ZUVj0
5
19
1,207
Kyverno enforces security policies in Kubernetes, but its policy reports and events stay inside the cluster by default. Our new blog post shows how Wazuh detects Kyverno policy violations. Read on: ow.ly/4jF150ZTyF7
1
6
1
18
818
Dell ObjectScale is affected by CVE-2026-70416 (CVSS 9.8 - Critical), an unauthenticated deserialization flaw that can lead to remote code execution. Upgrade to 4.4.0.0 or later immediately. Read more: ow.ly/abOA50ZSBvu
6
10
761
A big thank you to everyone who joined our recent Wazuh MeetUp in in Munich 🇩🇪 and Gliwice 🇵🇱 Great perspectives about Wazuh and its capabilities in different parts of the world. 🔗ow.ly/PKF950ZRvfe
1
8
637
Privilege escalation allows attackers to turn a standard-user foothold into full SYSTEM access on a compromised Windows system. Our new blog post shows how to detect Windows privilege escalation techniques using Wazuh. Read on: ow.ly/jZqS50ZQY3v
5
1
17
985
GitLab CE/EE is affected by CVE-2026-85706 (CVSS 10.0 - Critical), an unauthenticated arbitrary file read flaw in the repository commits API. Upgrade to 19.1.8, 19.2.6, or 19.3.2. Read more: ow.ly/QkGf50ZPNXE
2
12
48
3,000
A web application firewall (WAF) blocks attacks like SQL injection and XSS before they reach your app. Our latest blog post shows how to integrate the open source Coraza WAF with Wazuh for centralized visibility into your application security. Read on: ow.ly/Bp9I50ZOGaH
1
4
25
1,113