Login Request a demo
UG
Product
Universal Gateway
by Wso2 · last CVE Sep 3, 2026
On CISA KEVExploited in the wild
26
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities26In the news3Timeline
Severity mix
Critical 6High 10Medium 10Low 0
Severity
All severities26Critical6High10Medium10Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Universal Gateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-5430
In wildKEV
10.0
22%
Aug 6
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
Affected: 4.5.0 before 4.5.0.57; 4.6.0 before 4.6.0.21
CVE-2026-1728
9.8
0%
Aug 6
Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeover
Affected: 4.5.0 before 4.5.0.48; 4.6.0 before 4.6.0.12
CVE-2025-9312
9.8
0%
Nov 18
Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
Affected: 4.5.0
CVE-2025-10611
9.8
1%
Oct 16
Potential Broken Access Control in Multiple WSO2 Products via System REST APIs
Affected: 4.5.0
CVE-2025-15039
9.4
1%
Aug 6
Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
Affected: 4.5.0 before 4.5.0.44; 4.6.0 before 4.6.0.8
CVE-2025-10713
9.1
0%
Nov 5
XML External Entity (XXE) Vulnerability in Multiple WSO2 Products Due to Improper XML Parser Configuration
Affected: 4.5.0
Showing 6