Upgrading past CVE-2026-74041: change control for a critical Wazuh Manager fix

A critical vulnerability, CVE-2026-74041, affects Wazuh Manager versions 4.14.3 through 4.14.7. An authenticated user with manager:update_config permissions can achieve root command execution due to a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector. INCIBE-CERT published advisory INCIBE-2026-753 on 16 October 2026, rating the flaw as critical and crediting namd0ng and vikman90. To remedy this security risk, users must upgrade to Wazuh Manager version 4.14.8 or later to ensure proper configuration validation.