agentprime: wso2-carbon-api-manager-rest-api-utilityEvery new CVE for wso2-carbon-api-manager-rest-api-utility.https://agentprime.io/CVE-2025-11969: Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actionshttps://agentprime.io/advisories/CVE-2025-11969/https://agentprime.io/advisories/CVE-2025-11969/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 05:53:51 GMTCVEcriticalCVE-2025-14561: Access Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant Operationshttps://agentprime.io/advisories/CVE-2025-14561/https://agentprime.io/advisories/CVE-2025-14561/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 17:32:07 GMTCVEcriticalCVE-2026-5430: Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeoverhttps://agentprime.io/advisories/CVE-2026-5430/https://agentprime.io/advisories/CVE-2026-5430/CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 24 Sept 2026: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.22 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 07:33:28 GMTCVEcriticalKEVCVE-2026-1728: Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeoverhttps://agentprime.io/advisories/CVE-2026-1728/https://agentprime.io/advisories/CVE-2026-1728/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 07:33:25 GMTCVEcriticalCVE-2025-8325: Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operationshttps://agentprime.io/advisories/CVE-2025-8325/https://agentprime.io/advisories/CVE-2025-8325/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 09:37:16 GMTCVE