CVE-2021-41821

6.5 MEDIUM

Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service

Published: 2021-09-29 · Last updated: 2026-06-17

Severity and scoring

CVSS: 6.5 MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE: CWE-191

Affected products

Vendor	Product
wazuh	wazuh

Description

Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service. A crafted message must be sent from an authenticated agent to the manager.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-41821
[Vendor advisory]https://documentation.wazuh.com/current/release-notes/release_4_2_0.html
[Exploit reference]https://github.com/wazuh/wazuh/issues/9201
[Vendor advisory]https://documentation.wazuh.com/current/release-notes/release_4_2_0.html
[Exploit reference]https://github.com/wazuh/wazuh/issues/9201

Related CVEs

Same vendor

CVE-2026-32984 — Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sen... (3.5 LOW)

Same CWE

CVE-2026-54413 — driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_SecurityAccess() fu... (8.2 HIGH)
CVE-2026-54412 — LiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer underflow in the mqtt_unpack_publish_respons... (8.2 HIGH)
CVE-2026-47222 — NanaZip is the 7-Zip derivative intended for the modern Windows experience (5.4 MEDIUM)
CVE-2026-11850 — An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c (5.0 MEDIUM)
CVE-2026-42542 — TDengine is an open source, time-series database optimized for Internet of Things devices (7.5 HIGH)