Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 19:23:05 +0000 CVE-2026-4052 — Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager) https://db.gcve.eu/vuln/cve-2026-4052 <p><strong>Affected:</strong> WSO2 API Manager, WSO2 API Control Plane, WSO2 Identity Server Key Manager Connector (apim-km-wso2is)</p> <p>This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a token from the WSO2 Identity Server token endpoint.</p> <p><strong>Affected:</strong> WSO2 API Manager, WSO2 API Control Plane, WSO2 Identity Server Key Manager Connector (apim-km-wso2is)</p> <p>This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a token from the WSO2 Identity Server token endpoint.</p> https://db.gcve.eu/vuln/cve-2026-4052