CVE-2025-24016 Wazuh Wazuh Server
Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers.
- CVSS
- not scored
On CISA’s exploited list
Wazuh Server Deserialization of Untrusted Data Vulnerability
- Added
- 2025-06-10
- Federal patch deadline
- 2025-07-01
- Ransomware use
- not known