2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
6 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-2053 Wso2 Api Manager | HIGH8.3 | Wso2 Api Manager | CWE-918 Server Side Request Forgery | 0.4% | Jun 26, 2026 |
| CVE-2025-10470 Wso2 Identity Server | HIGH8.6 | Wso2 Identity Server | CWE-400 Uncontrolled Resource Consumption | 0.3% | May 11, 2026 |
| CVE-2024-2374 Wso2 Api Manager | HIGH7.5 | Wso2 Api Manager | CWE-611 XML External Entity | 0.4% | Apr 16, 2026 |
| CVE-2024-1524 Wso2 Api Manager | HIGH7.7 | Wso2 Api Manager | CWE-290 | 0.3% | Feb 24, 2026 |
| CVE-2025-13590 Wso2 Api Control Plane | CRITICAL9.1 | Wso2 Api Control Plane | CWE-434 Unrestricted File Upload | 0.7% | Feb 19, 2026 |
| CVE-2025-12107 Wso2 Identity Server | HIGH8.4 | Wso2 Identity Server | CWE-77 Command Injection | 0.6% | Feb 19, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications