I Found an RBAC Authorization Bypass in Wazuh — CVE-2026–74032
How a missing RBAC policy check exposed security actions and resources to low-privileged users. Continue reading on Medium »
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.