CVE-2025-15615
MEDIUM
NVD
CVSS Score
5.8
Severity
MEDIUM
Published
Mar 27, 2026
Vendor
unknown
Description
Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation requests. Attackers can exploit the lack of renegotiation limits to consume CPU resources and render the authd service unavailable.