Advisories · Technology

Kong Enterprise Gateway.

Every CVE that names Kong Enterprise Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-1907 CVE record

CVSS 7.5 High

SQL Injection in Clustering Communication (Hybrid Mode)
- Kong Enterprise Gateway
- Kong Gateway
- SQL injection
Not analysed yet 12 Oct 2026
CVE-2026-14917 CVE record

CVSS 7.7 High

Kong API Gateway Enterprise: SAML Authentication bypass
- Kong Enterprise Gateway
- Authentication bypass
Not analysed yet 16 Sept 2026
CVE-2026-6338 CVE record

CVSS 4.9 Medium

HTTP request smuggling in Kong Enteprise Gateway
- Kong Enterprise Gateway
- HTTP request smuggling
Not analysed yet 11 Jun 2026