Brand
WSO2: actively exploited vulnerabilities
2 vulnerabilities in WSO2 products (API Manager, Identity Server, Integrator) are in CISA’s catalog of exploited vulnerabilities, 1 of them added in the last 90 days. Last added: September 24, 2026.
-
1 vulnerability added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
1 added in the last 30 days
By category
Add just one WSO2 category to your radar, or open its page.
- Web and application servers 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- API Manager, Identity Server, Integrator 2 vulnerabilities · Web servers
Name used by CISA: WSO2. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this WSO2 list.
Rank 1WSO2 API Manager, Identity Server, Integrator
CVE-2026-5430Recently addedHunt for compromise (CISA)
WSO2 Multiple Products Path Traversal Vulnerability
Added to the catalog less than 30 days ago: ranked by date added.
- Added
- Sep 24, 2026
- CISA deadline
- 3 days
- CVSS severity
- 10.0 (critical)
Rank 2WSO2 API Manager, Identity Server, Integrator
CVE-2022-29464Ransomware
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Apr 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.