Skip to content

CVE record · 1 source

CVE-2026-4052

CVSS 9.8

This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing.

Vendor: WSO2
Product: WSO2 API Manager, WSO2 API Control Plane, WSO2 Identity Server Key Manager Connector (apim-km-wso2is)
CVSS v3.1: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-862
Exposure class: Identity

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

45

CVE NVD 2h ago

This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing.

This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API…

CVSS 9.8 CVE-2026-4052 WSO2