https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T01:28:42.504336+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-4052 CVE-2026-4052 — Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager) 2026-11-06T01:28:42.506736+00:00

Affected: WSO2 API Manager, WSO2 API Control Plane, WSO2 Identity Server Key Manager Connector (apim-km-wso2is)

This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a token from the WSO2 Identity Server token endpoint.