WC
Product
WSO2 Carbon OAuth
by WSO2 · last CVE Oct 28, 2026
6
CVEs
0
On KEV
7.4
Max CVSS
4
New 30D
Severity mix
Critical 0High 1Medium 2Low 2
Watch

Add WSO2 Carbon OAuth to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-6647
New
7.4–Oct 28
Incomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle Events
Affected: 7.0.385 before 7.0.385.17
Showing 1