org.wso2.km.ext.wso2is:wso2is.key.manager.core vulnerabilities

CVEs whose affected-version data names the org.wso2.km.ext.wso2is:wso2is.key.manager.core package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-4052Critical· 9.8

3d ago

Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager)

This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obt…

▾ MidnightWSO2 · WSO2 API ManagerEPSS 0.36%via CVEORG