org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.api vulnerabilities

CVEs whose affected-version data names the org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.api package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-3418Critical· 9.1

1mo ago

Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution

The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be written to arbitrary server-accessible locations. Exploitation requires authenticated ad…

▾ MidnightWSO2 · WSO2 API ManagerEPSS 0.76%via CVEORG