CVE Feed

    Dashboard / CVE / CVE-2026-2053

    CVE-2026-2053

    The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not sufficiently validate or restrict user-controlled input within these headers. This omission allows an attacker to manipulate WS-Addressing headers to specify arbitrary destinations for server-initiated requests. Successful exploitation allows an unauthenticated attacker to control the destination of server-initiated requests originating from the WSO2 API Manager. This direct control can enable unauthorized access to internal network resources or services that would typically be inaccessible from external networks.

    Published:Jun 26, 2026
    Last Modified:Jun 26, 2026
    EPS:Jun 26, 2026
    EPSS Score:0.00198
    CVSS Score:8.3

    Affected Products

    Vendor
    Wso2
    Product
    Wso2 Api Manager

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-664 Server Side Request Forgery

    Related CVEs

    CVE-2026-3096 (CVSS 4.7) — The product's web portals allow external links to be opened in a new browser tab. In certain configurations, t…
    CVE-2025-12737 (CVSS 8.4) — The administrative operations within the Carbon Console do not adequately validate specific user-supplied inpu…
    CVE-2026-3416 (CVSS 5.9) — The API Publisher component previously used a non-cryptographic pseudorandom number generator (PRNG) to create…
    CVE-2026-3418 (CVSS 9.1) — The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file typ…
    CVE-2026-3415 (CVSS 8.7) — The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of…
    CVE-2025-14561 (CVSS 9) — In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a…
    CVE-2025-6508 (CVSS 4.3) — The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definitio…
    CVE-2024-6541 (CVSS 6.8) — The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to p…
    CVE-2026-5430 (CVSS 10) — The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured …
    CVE-2026-1728 (CVSS 9.8) — Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access pro…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High