Skip to content

CVE record · 1 source

CVE-2026-2613

CVSS 8.7

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements.

Vendor: WSO2
Product: WSO2 API Manager, WSO2 Traffic Manager, WSO2 API Control Plane, WSO2 Universal Gateway
CVSS v3.1: 8.7 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H
Weakness: CWE-89
Exposure class: Identity

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

37

CVE NVD 1h ago

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements.

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements. A user with administrator privileges can exploit this by influencing the structure of…

CVSS 8.7 CVE-2026-2613 WSO2