Filtered by vendor Wso2
Subscriptions
Filtered by product Wso2 Carbon Api Management Api
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-3418 | 1 Wso2 | 7 Wso2 Api Control Plane, Wso2 Api Manager, Wso2 Api Manager Publisher Rest Api V4 and 4 more | 2026-08-06 | 9.1 Critical |
| The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be written to arbitrary server-accessible locations. Exploitation requires authenticated administrative access with publisher privileges. Successful exploitation permits an authenticated publisher to upload files to server-accessible locations. Depending on the deployment environment and how uploaded files are handled, this could lead to the execution of uploaded content, potentially resulting in remote code execution. | ||||
Page 1 of 1.