https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:28:20 +0000 https://cve.radiocsirt.org/vuln/cve-2026-3418 <p><strong>Affected:</strong> WSO2 API Manager, WSO2 Traffic Manager, WSO2 API Control Plane, WSO2 Universal Gateway, WSO2 Carbon API Management Implementation, WSO2 API Manager Publisher REST API V4, WSO2 Carbon API Management API</p> <p>The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be written to arbitrary server-accessible locations. Exploitation requires authenticated administrative access with publisher privileges.</p> <p>Successful exploitation permits an authenticated publisher to upload files to server-accessible locations. Depending on the deployment environment and how uploaded files are handled, this could lead to the execution of uploaded content, potentially resulting in remote code execution.</p> <p><strong>Affected:</strong> WSO2 API Manager, WSO2 Traffic Manager, WSO2 API Control Plane, WSO2 Universal Gateway, WSO2 Carbon API Management Implementation, WSO2 API Manager Publisher REST API V4, WSO2 Carbon API Management API</p> <p>The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be written to arbitrary server-accessible locations. Exploitation requires authenticated administrative access with publisher privileges.</p> <p>Successful exploitation permits an authenticated publisher to upload files to server-accessible locations. Depending on the deployment environment and how uploaded files are handled, this could lead to the execution of uploaded content, potentially resulting in remote code execution.</p> https://cve.radiocsirt.org/vuln/cve-2026-3418