WC
Product
WSO2 Carbon API Management Implementation
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 0Low 0
Watch
Add WSO2 Carbon API Management Implementation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3418 | 9.1 | Aug 6 | Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution Affected: 9.30.67 before 9.30.67.156; 9.31.86 before 9.31.86.141; 9.32.147 before 9.32.147.44 |
| CVE-2025-14561 | 9.0 | Aug 6 | Access Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant Operations Affected: 9.20.74 before 9.20.74.388; 9.28.116 before 9.28.116.395; 9.29.120 before 9.29.120.213; 9.30.67 before 9.30.67.135; 9.31.86 before 9.31.86.108; 9.32.147 before 9.32.147.5 |
Showing 2