RaqibCTI
CVE

CVE-2025-24016

P2
Wazuh Server Deserialization of Untrusted Data Vulnerability
Wazuh · Wazuh Server
Date added (CISA)
2025-06-10
Remediation due
2025-07-01
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers.

Source: NVD ↗ · CISA KEV Catalog ↗

CVE-2025-24016: Wazuh Server Deserialization of Untrusted Data Vulnerability · RaqibCTI