Is CVE-2026-56401 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-56401?

CVE-2026-56401 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-56401

Description

Wazuh wazuh-modulesd before 5.0.0-beta3 contains a null pointer dereference vulnerability in inventory_sync FlatBuffer DataValue handling. An enrolled agent can send a verifier-valid DataValue message omitting the optional id field, causing wazuh-modulesd to crash when dereferencing data->id()->string_view() without null validation, resulting in denial of service.