Brand
WSO2: actively exploited vulnerabilities
2 vulnerabilities in WSO2 products (API Manager, Identity Server, Integrator) are in CISA’s catalog of exploited vulnerabilities, 1 of them added in the last 90 days. Last added: September 24, 2026.
-
1 vulnerability added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
1 added in the last 30 days
By category
Add just one WSO2 category to your radar, or open its page.
- Web and application servers 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- API Manager, Identity Server, Integrator2 vulnerabilities, Web servers
Name used by CISA: WSO2. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this WSO2 list.
- Rank 1
WSO2 API Manager, Identity Server, IntegratorCVE-2026-5430
WSO2 Multiple Products Path Traversal Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 10.0critical
Added Sep 24, 2026
- Rank 2
WSO2 API Manager, Identity Server, IntegratorCVE-2022-29464
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
Ransomware
CVSS severity 9.8critical
Added Apr 25, 2022
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.