Heap buffer overflow in Wazuh manager rootcheck parsing (CVE-2026-34150)

CVE-2026-34150 is a heap buffer overflow in wazuh-analysisd affecting the Wazuh manager's rootcheck event parsing function W_JSON_ParseRootcheck, where a 30-byte heap buffer is written to without bounds checking via sprintf, allowing heap corruption and process crash. An unauthenticated remote attacker can exploit this vulnerability using only network access against default-configured deployments to crash wazuh-analysisd, causing complete and silent loss of SIEM alert processing while the dashboard and API continue to display stale data. Affected versions: - >= 1.0.0 We recommend updating to: >= 4.14.5. CVSS 7.5 · our assessment: this_week Vendor advisory: https://github.com/wazuh/wazuh/security/advisories/GHSA-rvr9-89q8-w883 Details: https://vuln.today/cve/CVE-2026-34150