Dashboard / CVE-2025-15616

CVE-2025-15616

HIGH
MEDIUM Priority: 0.12 BB Relevance: 60/100
Published: 2026-03-27 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
AT: None
VC: Low
VI: High
VA: High

Description

Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitrary commands through various components including logcollector configuration, maild SMTP server tags, and Kaspersky AR script parameters. Attackers can exploit these vulnerabilities by injecting malicious commands through configuration files, SMTP server settings, and custom flags to achieve remote code execution on affected systems.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
Wazuh wazuh-agent 2.1.0 < 4.8.0
Wazuh wazuh-manager 2.1.0 < 4.8.0

References & Advisories (2)

Bug Bounty Relevance

60 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

1.73%
Raw Score 0.017250
Percentile 77.9%
Date 2026-11-13

EPSS Trend

2026-11-13
0.01725
2026-11-12
0.01688
2026-11-10
0.01688
2026-11-09
0.01688
2026-11-08
0.01688

Intelligence Sources

mitre ref →

External Links