WSO2 Universal Gateway

3 known vulnerabilities in WSO2 Universal Gateway, 1 critical, 1 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2026-5430 CVSS 10.0 critical · actively exploited WSO2 Multiple Products Path Traversal Vulnerability

Latest vulnerabilities

  • CVE-2025-5802 CVSS 5.3 medium The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence…
  • CVE-2025-12737 CVSS 8.4 high The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a…
  • CVE-2026-5430 CVSS 10.0 critical · actively exploited WSO2 Multiple Products Path Traversal Vulnerability