WSO2 API Manager: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WSO2 API Manager ausnutzen, um beliebigen Programmcode auszuführen, Informationen auszulesen, Dateien zu manipulieren, oder einen Denial of Service Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Lowbsi:WID-SEC-2026-42512 linked CVEs
Open advisory with all CVEs
More on Manager
Other advisories
- Not ratedosv:CLEANSTART-2026-UD89634Helm is a package manager for Charts for Kubernetes
- Not ratedosv:CLEANSTART-2024-CS22654When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash
- Not ratedosv:CLEANSTART-2023-EC90112This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager
- Not ratedosv:CLEANSTART-2024-WJ25675lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor they have a reference to
- Not ratedosv:CLEANSTART-2024-ZR94862In unusual circumstances, an individual thread may outlive the thread's manager during shutdown
- Not ratedosv:CLEANSTART-2024-VH64255Heap buffer overflow in Task Manager in Google Chrome prior to 97
- Not ratedosv:CLEANSTART-2024-ZI15534exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3
- Not ratedosv:CLEANSTART-2024-CF42735issue was discovered in KDE Partition Manager 4
Other news entries
- When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer DiagnosisNewsSecurityWeek
- Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityNewsCisco PSIRT
- Cisco Unified Communications Products Security Hardening Release: October 2026NewsCisco PSIRT
- Kubernetes (kubelet, kube-controller-manager): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- DreamHost forces password resets in ongoing "incident"NewsBleepingComputer
- Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail und FortiAuthenticator: Mehrere Schwachstellen ermöglichen nicht spezifizierten AngriffVulnerabilityBSI CERT-Bund
- Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’NewsSecurityWeek
- DreamHost File Manager breach exposed FTP/SFTP and some webmail passwords, forcing resetsBreachpwn.watch
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4251
ID