<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>pwn.watch: Wazuh incident updates</title>
  <link>https://pwn.watch/t/wazuh</link>
  <description>Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them.</description>
  <language>en</language>
  <lastBuildDate>Tue, 10 Jun 2025 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/t/wazuh/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>[critical] Wazuh Server: Server Deserialization of Untrusted Data Vulnerability</title>
    <link>https://pwn.watch/i/wazuh-server-cve-2025-24016</link>
    <guid isPermaLink="true">https://pwn.watch/i/wazuh-server-cve-2025-24016</guid>
    <pubDate>Tue, 10 Jun 2025 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers. Added to CISA KEV on 2025-06-10.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; closed · &lt;strong&gt;Patch:&lt;/strong&gt; patched · &lt;strong&gt;Fixed in:&lt;/strong&gt; See vendor advisory linked in sources&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Latest updates:&lt;/strong&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;2025-06-10: CISA added CVE-2025-24016 to the KEV catalog (due 2025-07-01).&lt;/li&gt;&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;CVEs:&lt;/strong&gt; CVE-2025-24016&lt;/p&gt;</description>
  </item>
</channel>
</rss>
