https://patchfirst.co/vendor/wazuh/New and newly exploited Wazuh CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2026-74040/CVE-2026-74040Tue, 13 Oct 2026 00:00:00 GMTWazuh · wazuh-manager. Not in CISA KEV. EPSS 0.7% (higher than 53.8% of CVEs). CVSS 9.1 CRITICAL. Priority 19.3 of 100.https://patchfirst.co/cve/CVE-2025-24016/CVE-2025-24016#kevTue, 10 Jun 2025 00:00:00 GMTWazuh · Wazuh Server. In CISA KEV since 2025-06-10. ENISA EUVD lists it as exploited. EPSS 93.8% (higher than 99.84% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 69.9 of 100.kevpublic-exploitT1078T1059