MSRXMSRXSecurity
Vendors / WSO2

WSO2 vulnerabilities being exploited

1 WSO2 flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Multiple Products. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-09-24CVE-2026-5430 Multiple Products
WSO2 Multiple Products Path Traversal Vulnerability

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.

2026-09-27
Watch my WSO2 softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.