WSO2 API Manager: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WSO2 API Manager ausnutzen, um beliebigen Programmcode auszuführen, Informationen auszulesen, Dateien zu manipulieren, oder einen Denial of Service Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Lowbsi:WID-SEC-2026-42512 linked CVEs
Open advisory with all CVEs
More on Manager
Other advisories
- MediumCVE-2026-76419Cisco Unified Communications Manager: Cross-Site-Scripting (XSS)
- MediumCVE-2026-76419Cisco Unified Communications Manager: Cross-Site-Scripting (XSS)
- MediumCVE-2026-2270Kubernetes (kubelet, kube-controller-manager): Mehrere Schwachstellen
- HighCVE-2026-77779Zohocorp ManageEngine Key Manager Plus: zu grobe Zugriffskontrolle
- HighCVE-2026-77690Zohocorp ManageEngine Key Manager Plus: Betriebssystem-Befehlsinjektion
- HighCVE-2026-77690Zohocorp ManageEngine Key Manager Plus: Betriebssystem-Befehlsinjektion
- HighCVE-2026-77779Zohocorp ManageEngine Key Manager Plus: zu grobe Zugriffskontrolle
- HighCVE-2026-92615Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.2 Security Update
Other news entries
- DreamHost confirms data breach exposed FTP logins and webmail sessionsNewsBleepingComputer
- Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as RootNewsThe Hacker News
- mSecure password manager hack prompts password reset warningsNewsBleepingComputer
- Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityNewsCisco PSIRT
- Passwortmanager mSecure: Nutzer sollen nach IT-Vorfall Hunderte Passwörter ändernNewsGolem.de — Security
- mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious ActivityNewsThe Hacker News
- Password manager mSecure tells users to change passwords, won't say whyNewsThe Register — Security
- Passwort-Manager mSecure: Nach IT-Vorfall Zugangsdaten sichernNewsheise Security
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4251
ID