WSO2 WSO2 API Manager vulnerabilities
95 published CVEs name WSO2 WSO2 API Manager among the affected products; CISA lists 1 of them as exploited in the wild.
- 95Published CVEs95 of them scored
- 62Last 12 monthspublished in the last year
- 15Critical12 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-5430
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
WSO2 · WSO2 Universal Gateway
ExploitedCritical10.0