{"metadata": {"vulnerability": "CVE-2026-74034", "count": 13, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-08-14T14:06:40.512Z", "date_only": false, "value": "2026-08-14T14:06:40.512Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-74034", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-74034", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T13:27:28.086Z", "date_only": false, "value": "2026-10-13T13:27:28.086Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-74034", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T13:27:28.086Z", "date_only": false, "value": "2026-10-13T13:27:28.086Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-74034", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T14:17:40.087Z", "date_only": false, "value": "2026-10-13T14:17:40.087", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74034", "record": "FKIE_CVE-2026-74034", "field": "published"}, {"timestamp": "2026-10-13T14:23:57.753Z", "date_only": false, "value": "2026-10-13T14:23:57.753785Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434052551902328", "record": "CVE-2026-74034", "field": "creation_timestamp", "uuid": "31dae88f-2978-409b-9aff-46a4171eb6c6", "content": "CVE-2026-74034 Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Command Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with attacker-controlled file_path. Attackers can inject an upgrade_custom message over the agent channel to read arbitrary files as root, exfiltrating /etc/shadow and client.keys.\nhttps://www.cve.org/CVERecord?id=CVE-2026-74034https://github.com/wazuh/wazuh/security/advisories/GHSA-r7hm-43xr-477jhttps://github.com/wazuh/wazuh/releases/tag/v4.14.8https://www.vulncheck.com/advisories/wazuh-4.1.0-before-4.14.8-arbitrary-file-read-via-upgrade-custom-command#Wazuh #wazuh-manager#CVE_2026_74034#bot", "url": "https://infosec.exchange/users/cve/statuses/117434052551902328"}, {"timestamp": "2026-10-13T15:05:32.131Z", "date_only": false, "value": "2026-10-13T15:05:32.131035Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxrcmnm44v2b", "record": "CVE-2026-74034", "field": "creation_timestamp", "uuid": "0ab914c8-5083-4d76-a13b-65ccf399f370", "content": "\ud83d\udfe0 CVE-2026-74034 - High (7.5)\n\nWazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows en...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-74034/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxrcmnm44v2b"}, {"timestamp": "2026-10-14T06:26:11Z", "date_only": false, "value": "2026-10-14T06:26:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-wazuh", "record": "CVE-2026-74034", "field": "creation_timestamp", "uuid": "7d6869d7-8ed0-490e-9631-812258fd9b16", "url": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-wazuh"}, {"timestamp": "2026-10-14T14:09:23.951Z", "date_only": false, "value": "2026-10-14T14:09:23.951114Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-74034", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T14:09:23.951Z", "date_only": false, "value": "2026-10-14T14:09:23.951114Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74034", "record": "FKIE_CVE-2026-74034", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T14:09:51.932Z", "date_only": false, "value": "2026-10-14T14:09:51.932Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-74034", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:09:51.932Z", "date_only": false, "value": "2026-10-14T14:09:51.932Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-74034", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:49:21.457Z", "date_only": false, "value": "2026-10-15T15:49:21.457", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74034", "record": "FKIE_CVE-2026-74034", "field": "lastModified"}]}