<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wso2-carbon-api-management-implementation</title><description>Every new CVE for wso2-carbon-api-management-implementation.</description><link>https://agentprime.io/</link><item><title>CVE-2026-2613: SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service Disruption</title><link>https://agentprime.io/advisories/CVE-2026-2613/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-2613/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Nov 2026 10:11:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3418: Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution</title><link>https://agentprime.io/advisories/CVE-2026-3418/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3418/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 17:32:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-3415: XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service</title><link>https://agentprime.io/advisories/CVE-2026-3415/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3415/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 17:32:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14561: Access Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant Operations</title><link>https://agentprime.io/advisories/CVE-2025-14561/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14561/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 17:32:07 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-8325: Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations</title><link>https://agentprime.io/advisories/CVE-2025-8325/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-8325/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 09:37:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-8154: HTTP Header Injection via Webhook API in Multiple WSO2 Products Allows Response Header Manipulation</title><link>https://agentprime.io/advisories/CVE-2025-8154/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-8154/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 09:30:36 GMT</pubDate><category>CVE</category></item></channel></rss>