{"metadata": {"vulnerability": "CVE-2026-74040", "count": 15, "kinds": {"milestone": 3, "sighting": 5, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-08-14T14:06:40.512Z", "date_only": false, "value": "2026-08-14T14:06:40.512Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-74040", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-74040", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T13:27:30.557Z", "date_only": false, "value": "2026-10-13T13:27:30.557Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-74040", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T13:27:30.557Z", "date_only": false, "value": "2026-10-13T13:27:30.557Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-74040", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T14:17:40.720Z", "date_only": false, "value": "2026-10-13T14:17:40.720", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74040", "record": "FKIE_CVE-2026-74040", "field": "published"}, {"timestamp": "2026-10-13T14:20:05.992Z", "date_only": false, "value": "2026-10-13T14:20:05.992525Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxra3fv2qw2r", "record": "CVE-2026-74040", "field": "creation_timestamp", "uuid": "f9021b73-5b64-49f5-961e-402d386702b7", "content": "CVE-2026-74040 - wazuh-manager\nWazuh manager versions from 3.9.0 up to 4.14.7 allow a cluster worker to replace important configuration files on the master server. If an attacker controls a worker, they\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wazuhmanager #wazuh #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxra3fv2qw2r"}, {"timestamp": "2026-10-13T14:26:38.647Z", "date_only": false, "value": "2026-10-13T14:26:38.647144Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434063129075203", "record": "CVE-2026-74040", "field": "creation_timestamp", "uuid": "5aa1754c-c906-43e7-aa14-4bd00e3d9f5a", "content": "CVE-2026-74040 Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.process_files_from_worker allowing a cluster worker to overwrite protected master files. Attackers controlling a worker can use a trailing-slash basename bypass and missing extra_valid enforcement to overwrite ossec.conf and agent.conf, achieving root remote code execution across the manager and every agent.\nhttps://www.cve.org/CVERecord?id=CVE-2026-74040https://github.com/wazuh/wazuh/security/advisories/GHSA-88p6-7cm8-xwj8https://github.com/wazuh/wazuh/releases/tag/v4.14.8https://www.vulncheck.com/advisories/wazuh-3.9.0-before-4.14.8-arbitrary-file-overwrite-rce-via-process-files-from-worker#Wazuh #wazuh-manager#CVE_2026_74040#bot", "url": "https://infosec.exchange/users/cve/statuses/117434063129075203"}, {"timestamp": "2026-10-13T15:05:37.792Z", "date_only": false, "value": "2026-10-13T15:05:37.792211Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxrcmtx6cj2k", "record": "CVE-2026-74040", "field": "creation_timestamp", "uuid": "96ea2d15-8e34-450b-8fb4-316ba8fb6335", "content": "\ud83d\udd34 CVE-2026-74040 - Critical (9.1)\n\nWazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in Mast...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-74040/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxrcmtx6cj2k"}, {"timestamp": "2026-10-13T16:08:08.678Z", "date_only": false, "value": "2026-10-13T16:08:08.678325Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrg4nijqa2z", "record": "CVE-2026-74040", "field": "creation_timestamp", "uuid": "7dc22cfa-6803-43d2-97c8-deb697c7609b", "content": "\ud83d\udea8 CVE-2026-74040 \u2014 CVSS 9.4 CRITICAL\n\nWazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74040\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrg4nijqa2z"}, {"timestamp": "2026-10-14T06:26:11Z", "date_only": false, "value": "2026-10-14T06:26:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-wazuh", "record": "CVE-2026-74040", "field": "creation_timestamp", "uuid": "be5a8b2c-ca35-4c6b-ab34-94a7cab0495c", "url": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-wazuh"}, {"timestamp": "2026-10-16T21:53:07.447Z", "date_only": false, "value": "2026-10-16T21:53:07.447925Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-74040", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T21:53:07.447Z", "date_only": false, "value": "2026-10-16T21:53:07.447925Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74040", "record": "FKIE_CVE-2026-74040", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T21:53:48.974Z", "date_only": false, "value": "2026-10-16T21:53:48.974Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-74040", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T21:53:48.974Z", "date_only": false, "value": "2026-10-16T21:53:48.974Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-74040", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T22:17:55.680Z", "date_only": false, "value": "2026-10-16T22:17:55.680", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74040", "record": "FKIE_CVE-2026-74040", "field": "lastModified"}]}