Product by WSO2
Wso2 Carbon API Manager Rest API Utility
4 known vulnerabilities in Wso2 Carbon API Manager Rest API Utility (WSO2), 1 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-5430 | Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover In CISA KEValso in 8 other products | 10.0 | |
| Critical | CVE-2026-1728 | Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeover | 9.8 | |
| Critical | CVE-2025-14561 | WSO2 API Manager: Improper Access Control | 9.0 | |
| High | CVE-2025-8325 | Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations | 6.3 |
News
- CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacksbleepingcomputer,
- WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEVthehackernews,
- Enterprises Warned of Attacks Exploiting WSO2 Vulnerabilitysecurityweek,
- Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokensthehackernews,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,