Kong

Products

Exploited and recent CVEs

• CVE-2026-1907 High 7.5 SQL Injection in Clustering Communication (Hybrid Mode) 0.1%
• CVE-2026-1907 High 7.5 SQL Injection in Clustering Communication (Hybrid Mode) 0.1%
• CVE-2026-14916 High 7.7 Kong API Gateway Enterprise: JWT Algorithm-Confusion 0.7%
• CVE-2026-14917 High 7.7 Kong API Gateway Enterprise: SAML Authentication bypass 0.8%
• CVE-2026-17578 Low 2.3 Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement 0.2%
• CVE-2026-6338 Medium 4.9 HTTP request smuggling in Kong Enteprise Gateway 0.3%
• CVE-2025-1353 High 7.0 Kong Insomnia profapi.dll untrusted search path 0.2%
• CVE-2020-36661 Low 3.5 Kong lua-multipart multipart.lua is_header redos 0.9%