https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T19:40:52.486072+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-9152 CVE-2025-9152 — Improper Privilege Management in Multiple WSO2 API Manager via keymanager-operations DCR Endpoint 2026-10-20T19:40:52.487262+00:00

Affected: WSO2 API Manager, WSO2 API Control Plane

An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration (DCR) endpoint.

A malicious user can exploit this flaw to generate access tokens with elevated privileges, potentially leading to administrative access and the ability to perform unauthorized operations.