Advisories · Technology

WSO2 API Manager Publisher REST API V4.

Every CVE that names WSO2 API Manager Publisher REST API V4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-3418 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution
- WSO2 API Manager
- WSO2 Traffic Manager
- Unrestricted file upload
Not analysed yet 6 Aug 2026