https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:50:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-309391 EUVD-2026-309391 https://cve.radiocsirt.org/vuln/euvd-2026-309391 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8325 <p>The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the &#39;Internal/Everyone&#39; role can invoke these APIs, bypassing intended permission checks. This same vulnerability also affects Internal Service APIs, potentially exposing them in WSO2 APIM 3.x versions.</p> <p>A malicious actor with a valid user account on a vulnerable deployment can perform sensitive operations against the Gateway REST API regardless of their actual roles or privileges. This could lead to unintended behavior or misuse, particularly in production environments.</p> <p>The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the &#39;Internal/Everyone&#39; role can invoke these APIs, bypassing intended permission checks. This same vulnerability also affects Internal Service APIs, potentially exposing them in WSO2 APIM 3.x versions.</p> <p>A malicious actor with a valid user account on a vulnerable deployment can perform sensitive operations against the Gateway REST API regardless of their actual roles or privileges. This could lead to unintended behavior or misuse, particularly in production environments.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8325 https://cve.radiocsirt.org/vuln/ghsa-xh36-jjpq-3cmr <p>The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the &#39;Internal/Everyone&#39; role can invoke these APIs, bypassing intended permission checks. This same vulnerability also affects Internal Service APIs, potentially exposing them in WSO2 APIM 3.x versions.</p> <p>A malicious actor with a valid user account on a vulnerable deployment can perform sensitive operations against the Gateway REST API regardless of their actual roles or privileges. This could lead to unintended behavior or misuse, particularly in production environments.</p> <p>The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the &#39;Internal/Everyone&#39; role can invoke these APIs, bypassing intended permission checks. This same vulnerability also affects Internal Service APIs, potentially exposing them in WSO2 APIM 3.x versions.</p> <p>A malicious actor with a valid user account on a vulnerable deployment can perform sensitive operations against the Gateway REST API regardless of their actual roles or privileges. This could lead to unintended behavior or misuse, particularly in production environments.</p> https://cve.radiocsirt.org/vuln/ghsa-xh36-jjpq-3cmr