WSO2 2

Organization

CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 24, 2026

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.

Vulnerabilities & Patching

CVE-2022-29464: WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Apr 25, 2022

Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.

Vulnerabilities & Patching