Review Inbox
Keep track of Wazuh alerts and CVEs that need attention in one queue covering the last 7 days.
- Review by package. CVEs are grouped by package name, with counts of affected hosts and CVEs. Open a group to search its hosts and CVEs.
- Pick up where you left off. Swipe left on a group to mark it as reviewed. Find it again under Reviewed, or confirm Mark all reviewed to mark the whole queue at once.
- Spot new detections. New detections bring a reviewed group back into the queue. The summary shows packages, CVEs, and hosts since your last review.
- Open cached data quickly. The inbox keeps a local cache and checks for missing data after an hour. Tap Refresh to check sooner, or hold it to reload all 7 days with confirmation.
- Follow the download. Progress shows the date being fetched. Sync continues when you switch screens, and large host and CVE lists load in pages.
Review marks stay on your device. You can clear them in Settings to start your review again.
Saved views for alerts and CVEs
Save your filters, time range, sorting, and compact list preference in Alerts and Vulnerabilities. Reopen a saved view to return to the information you check most often.
Fixes and interface improvements
- Improved memory use when processing large inboxes and opening detailed host and CVE lists.
- Improved handling of server rate limits and interrupted downloads.
- Clearer alert and CVE icons, loading states, and review actions. Mark all reviewed shows a centered spinner while it updates the queue.
- The About screen now shows the installed app version and build.