Filtered by vendor Wso2 Subscriptions
Filtered by product Wso2 Carbon Api Management Api Subscriptions

Search

Switch to Advanced Search (Beta)
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-3418 1 Wso2 12 Api Control Plane, Api Manager, Carbon Api Management Api and 9 more 2026-08-07 9.1 Critical
The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be written to arbitrary server-accessible locations. Exploitation requires authenticated administrative access with publisher privileges. Successful exploitation permits an authenticated publisher to upload files to server-accessible locations. Depending on the deployment environment and how uploaded files are handled, this could lead to the execution of uploaded content, potentially resulting in remote code execution.