Advisories · Technology

WSO2 Enterprise Integrator (BPS profile).

Every CVE that names WSO2 Enterprise Integrator (BPS profile) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78674 CVE record

CVSS 8.8 High

Remote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution
- WSO2 Enterprise Integrator (BPS profile)
- WSO2 Business Process Server
- Command injection
Not analysed yet 28 Oct 2026