Skip to content

WSO2 WSO2 Carbon API Manager Rest API Common Functions

CVE-2025-11969 Critical 9.4 Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions 0.3%
CVE-2026-1728 Critical 9.8 Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeover 0.5%