https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 00:51:15 +0000 https://cve.radiocsirt.org/vuln/cve-2026-1728 <p><strong>Affected:</strong> WSO2 API Manager, WSO2 API Control Plane, WSO2 Universal Gateway, WSO2 Traffic Manager, WSO2 Carbon API Manager Rest API Common Functions, WSO2 Carbon API Manager Rest API Utility</p> <p>Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs.</p> <p>Exploitation of this vulnerability allows a low-privileged user to invoke the Admin REST APIs of WSO2 products, potentially leading to full administrative account takeover. This requires the attacker to already possess a low-privileged user account and be able to obtain a valid token for it.</p> <p><strong>Affected:</strong> WSO2 API Manager, WSO2 API Control Plane, WSO2 Universal Gateway, WSO2 Traffic Manager, WSO2 Carbon API Manager Rest API Common Functions, WSO2 Carbon API Manager Rest API Utility</p> <p>Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs.</p> <p>Exploitation of this vulnerability allows a low-privileged user to invoke the Admin REST APIs of WSO2 products, potentially leading to full administrative account takeover. This requires the attacker to already possess a low-privileged user account and be able to obtain a valid token for it.</p> https://cve.radiocsirt.org/vuln/cve-2026-1728