{"metadata": {"vulnerability": "CVE-2026-74043", "count": 14, "kinds": {"milestone": 3, "sighting": 4, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-08-14T14:06:40.513Z", "date_only": false, "value": "2026-08-14T14:06:40.513Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-74043", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-74043", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T13:27:31.867Z", "date_only": false, "value": "2026-10-13T13:27:31.867Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-74043", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T13:27:31.867Z", "date_only": false, "value": "2026-10-13T13:27:31.867Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-74043", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T14:17:41.003Z", "date_only": false, "value": "2026-10-13T14:17:41.003", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74043", "record": "FKIE_CVE-2026-74043", "field": "published"}, {"timestamp": "2026-10-13T14:21:05.301Z", "date_only": false, "value": "2026-10-13T14:21:05.301997Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxra57bpfh2n", "record": "CVE-2026-74043", "field": "creation_timestamp", "uuid": "725e22cb-d7ad-4c27-82c7-d2dffef97f00", "content": "\ud83d\udd34 CVE-2026-74043 - Critical (9)\n\nWazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, uploa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-74043/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxra57bpfh2n"}, {"timestamp": "2026-10-13T14:27:59.135Z", "date_only": false, "value": "2026-10-13T14:27:59.135815Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434068415917735", "record": "CVE-2026-74043", "field": "creation_timestamp", "uuid": "4d3f7693-e7b9-49fe-8d77-c13297d6d87c", "content": "CVE-2026-74043 Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functions Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and upload_decoder_file that allows malicious cluster workers to write files at arbitrary paths. Attackers holding the cluster key can send DistributedAPI requests with ../ sequences in filename, bypassing REST controller validation, to write files as the wazuh user.\nhttps://www.cve.org/CVERecord?id=CVE-2026-74043https://github.com/wazuh/wazuh/security/advisories/GHSA-cw26-jj8q-x7w5https://github.com/wazuh/wazuh/releases/tag/v4.14.8https://www.vulncheck.com/advisories/wazuh-4.1.1-before-4.14.8-path-traversal-via-cluster-upload-functions#Wazuh #wazuh-manager#CVE_2026_74043#bot", "url": "https://infosec.exchange/users/cve/statuses/117434068415917735"}, {"timestamp": "2026-10-13T14:30:04.342Z", "date_only": false, "value": "2026-10-13T14:30:04.342959Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxranblh3t27", "record": "CVE-2026-74043", "field": "creation_timestamp", "uuid": "bd36fb0a-0ad6-4204-a9c2-6aa0a10ce334", "content": "CVE-2026-74043 - wazuh-manager\nThe Wazuh manager (versions 4.1.1 through 4.14.7) lets anyone with the cluster key send specially crafted upload requests that include \"..\" in the filename. This lets the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wazuhmanager #wazuh #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxranblh3t27"}, {"timestamp": "2026-10-13T16:40:39.101Z", "date_only": false, "value": "2026-10-13T16:40:39.101760Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-74043", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T16:40:39.101Z", "date_only": false, "value": "2026-10-13T16:40:39.101760Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74043", "record": "FKIE_CVE-2026-74043", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T16:43:23.732Z", "date_only": false, "value": "2026-10-13T16:43:23.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-74043", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:43:23.732Z", "date_only": false, "value": "2026-10-13T16:43:23.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-74043", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T20:39:48.767Z", "date_only": false, "value": "2026-10-13T20:39:48.767", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-74043", "record": "FKIE_CVE-2026-74043", "field": "lastModified"}, {"timestamp": "2026-10-14T06:26:11Z", "date_only": false, "value": "2026-10-14T06:26:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-wazuh", "record": "CVE-2026-74043", "field": "creation_timestamp", "uuid": "7488efb4-8026-4eca-bbb7-5a77219ad19b", "url": "https://www.acn.gov.it/portale/w/disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-wazuh"}]}