Products: 111
    Vulnerabilities: 146
    Known Exploited: 1
    15
    Critical Level Threats
    21
    High Level Threats
    101
    Medium Level Threats
    9
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-3096

    Reverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential Theft

    Last Modified: Sep 11, 2026
    Published: Sep 10, 2026

    CVE-2025-12737

    Arbitrary Code Execution via Administrative Operations in Multiple WSO2 Products Allows Remote Code Execution

    Last Modified: Sep 09, 2026
    Published: Sep 03, 2026

    CVE-2026-3416

    Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event Payloads

    Last Modified: Sep 03, 2026
    Published: Sep 03, 2026

    CVE-2026-3418

    Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution

    Last Modified: Aug 07, 2026
    Published: Aug 06, 2026

    CVE-2026-3415

    XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service

    Last Modified: Aug 07, 2026
    Published: Aug 06, 2026
    Items Per Page