CVE-2026-32983CWE-276

SSL/TLS Renegotiation DoS in Wazuh Manager authd service

Medium · published March 27, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation requests. Attackers can exploit the lack of renegotiation limits to consume CPU resources and render the authd service unavailable.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
EPSS
0.00544 · 44.9th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2026-03-27T15:44Z
EPSS history
Timeline
  • 27 MAR 15:44Z
    SSL/TLS Renegotiation DoS in Wazuh Manager authd service
    cvelistv5