{"metadata": {"vulnerability": "CVE-2026-74041", "count": 15, "kinds": {"milestone": 3, "sighting": 5, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-08-14T14:06:40.512Z", "date_only": false, "value": "2026-08-14T14:06:40.512Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-74041", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-74041", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T13:27:31.203Z", "date_only": false, "value": "2026-10-13T13:27:31.203Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-74041", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T13:27:31.203Z", "date_only": false, "value": "2026-10-13T13:27:31.203Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-74041", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T14:17:40.860Z", "date_only": false, "value": "2026-10-13T14:17:40.860", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74041", "record": "FKIE_CVE-2026-74041", "field": "published"}, {"timestamp": "2026-10-13T14:20:07.021Z", "date_only": false, "value": "2026-10-13T14:20:07.021538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxra3hj2sz2w", "record": "CVE-2026-74041", "field": "creation_timestamp", "uuid": "8daf00e8-1d55-4bc0-adb3-018d7477adc1", "content": "CVE-2026-74041 - wazuh-manager\nVersions of the Wazuh manager before 4.14.8 have a mismatch in how they check configuration files, allowing users who can change settings to add an uppercase LOG_FORMAT\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wazuhmanager #wazuh #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxra3hj2sz2w"}, {"timestamp": "2026-10-13T14:27:18.873Z", "date_only": false, "value": "2026-10-13T14:27:18.873744Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434065771574266", "record": "CVE-2026-74041", "field": "creation_timestamp", "uuid": "dfb8612c-4dd8-407b-b248-03b81a4409b4", "content": "CVE-2026-74041 Wazuh 4.14.3 before 4.14.8 Remote Command Validation Bypass via Case Mismatch Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:update_config can inject an uppercase LOG_FORMAT command localfile that the collector runs as root on reload.\nhttps://www.cve.org/CVERecord?id=CVE-2026-74041https://github.com/wazuh/wazuh/security/advisories/GHSA-cjf8-wjx6-hjw6https://github.com/wazuh/wazuh/releases/tag/v4.14.8https://www.vulncheck.com/advisories/wazuh-4.14.3-before-4.14.8-remote-command-validation-bypass-via-case-mismatch#Wazuh #wazuh-manager#CVE_2026_74041#bot", "url": "https://infosec.exchange/users/cve/statuses/117434065771574266"}, {"timestamp": "2026-10-13T15:05:44.883Z", "date_only": false, "value": "2026-10-13T15:05:44.883032Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxrcn27ak22g", "record": "CVE-2026-74041", "field": "creation_timestamp", "uuid": "0ca8abb9-3425-41ba-9041-0471923c877e", "content": "\ud83d\udd34 CVE-2026-74041 - Critical (9.1)\n\nWazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-74041/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxrcn27ak22g"}, {"timestamp": "2026-10-13T16:08:18.419Z", "date_only": false, "value": "2026-10-13T16:08:18.419404Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrg4wiuwp24", "record": "CVE-2026-74041", "field": "creation_timestamp", "uuid": "a836d761-7cbf-45df-867f-83a3979d562d", "content": "\ud83d\udea8 CVE-2026-74041 \u2014 CVSS 9.4 CRITICAL\n\nWazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74041\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrg4wiuwp24"}, {"timestamp": "2026-10-14T06:26:11Z", "date_only": false, "value": "2026-10-14T06:26:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-wazuh", "record": "CVE-2026-74041", "field": "creation_timestamp", "uuid": "dd09702f-20ea-4fc5-b320-b5a0608c4df8", "url": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-wazuh"}, {"timestamp": "2026-10-14T14:12:03.074Z", "date_only": false, "value": "2026-10-14T14:12:03.074387Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-74041", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T14:12:03.074Z", "date_only": false, "value": "2026-10-14T14:12:03.074387Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74041", "record": "FKIE_CVE-2026-74041", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T14:14:38.913Z", "date_only": false, "value": "2026-10-14T14:14:38.913Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-74041", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:14:38.913Z", "date_only": false, "value": "2026-10-14T14:14:38.913Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-74041", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T16:14:23.840Z", "date_only": false, "value": "2026-10-14T16:14:23.840", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74041", "record": "FKIE_CVE-2026-74041", "field": "lastModified"}]}