
POC for deserialization of untrusted data in wazuh leading to RCE
CVE-2026-25769 is a critical Remote Code Execution (RCE) vulnerability in Wazuh, the open-source security platform used for threat prevention, detection, and response.
Wazuh is a free and open-source security platform used for threat prevention, detection, and response. It is widely deployed across enterprises as a Security Information and Event Management () and Extended Detection and Response (XDR) solution