Dashboard / CVE-2025-15612

CVE-2025-15612

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 73/100
Published: 2026-03-27 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
AT: None
VC: Low
VI: Low
VA: None

Description

Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. Attackers with network access can perform man-in-the-middle attacks to intercept and modify downloaded dependencies or code during the build process, leading to remote code execution and supply chain compromise.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
Wazuh Wazuh Provisioning Scripts (Agent Build Environment) >=4.1.3

References & Advisories (2)

Bug Bounty Relevance

73 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

6.3 / 10.0 v4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.22%
Raw Score 0.002240
Percentile 13.2%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00224
2026-11-12
0.00224
2026-11-10
0.00224
2026-11-09
0.00224
2026-11-08
0.00224

Intelligence Sources

mitre ref →

External Links