u/JaviiiiO

Good evening,

Qualys reported several vulnerabilities affecting Packetbeat, specifically ESA-2025-30 and ESA-2025-31, but I’m not sure how to mitigate them.

I tried updating Packetbeat, but it reports that we’re already running the latest available version in our environment (7.10.2). I’d rather not upgrade to a different major branch because it could introduce compatibility issues.

Has anyone already dealt with these vulnerabilities? How did you mitigate them?

Also, is Wazuh actually vulnerable to these issues, or do they only affect standalone Packetbeat deployments?

Any guidance would be appreciated. Thanks!