WSO2 WSO2 Carbon API Manager Rest API Utility

• CVE-2026-5430 Critical 10.0 Exploited Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover 22.4%
• CVE-2025-11969 Critical 9.4 Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions 0.3%
• CVE-2025-14561 Critical 9.0 Access Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant Operations 0.4%
• CVE-2026-1728 Critical 9.8 Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeover 0.5%
• CVE-2025-8325 Medium 6.3 Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations 0.2%