Skip to contentWso2 Carbon Api Management Implementation vulnerabilities
- wso2 api control plane, api manager, carbon api management implementation +2 more +4 moreSQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service DisruptionCVE-2026-26138.7 High
- wso2 api control plane, api manager, api manager publisher rest api v4 +4 more +6 moreArbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code ExecutionCVE-2026-34189.1 Critical
- wso2 api control plane, api manager, carbon api gateway +3 more +5 moreXML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of ServiceCVE-2026-34158.7 High
- wso2 api control plane, api manager, carbon api management implementation +3 more +5 moreAccess Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant OperationsCVE-2025-145619.0 Critical
- wso2 api control plane, api manager, traffic manager +3 more +5 moreImproper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized OperationsCVE-2025-83256.3 Medium
- wso2 api control plane, api manager, traffic manager +3 more +5 moreHTTP Header Injection via Webhook API in Multiple WSO2 Products Allows Response Header ManipulationCVE-2025-81545.3 Medium