Skip to contentWso2 Carbon Api Manager Rest Api Utility vulnerabilities
- wso2 api manager, api control plane, carbon api manager rest api common functions +6 more +8 moreBroken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative ActionsCVE-2025-119699.4 Critical
- wso2 api control plane, api manager, carbon api management implementation +3 more +5 moreAccess Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant OperationsCVE-2025-145619.0 Critical
- wso2 api control plane, api manager, multiple products +3 more +5 moreAuthentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account TakeoverCVE-2026-5430In KEVPublic exploitEPSS 22.4%10.0 Critical
- wso2 api control plane, api manager, traffic manager +3 more +5 morePrivilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account TakeoverCVE-2026-17289.8 Critical
- wso2 api control plane, api manager, traffic manager +3 more +5 moreImproper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized OperationsCVE-2025-83256.3 Medium