Threats Tagged 'ghsa-88j3-cjwq-qqvv'

1 threat

Threats Tagged 'ghsa-88j3-cjwq-qqvv'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-1728WSO2 API Manager · Improper Privilege Management Critical9.8EPSS 0.5%2026-08-06CVE Database V5CVE-2026-1728 CVE-2026-1728 is a critical vulnerability in WSO2 API Manager where tokens issued to low-privileged users are not sufficiently restricted. This flaw allows these tokens to access product-level Admin REST APIs, potentially enabling an attacker with a low-privileged account to escalate privileges to full administrative control. The vulnerability affects multiple specific versions of WSO2 API Manager. No official patch or remediation guidance has been provided yet. EPSS 0.5%Vulnerability WSO2 #cwe-269 #ghsa-88j3-cjwq-qqvv	CVE Database V5	2026-08-06

Showing 1–1 of 1 result