CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-5430

The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized access. Successful exploitation of this vulnerability may result in unauthorized access to the system, including the potential compromise of administrative accounts and full account takeover. The CVSS score is adjusted to 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) in single-tenant deployments, reflecting that the impact is contained within a single security authority boundary.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 28.6%

CVSS Severity

CVSS v3 Score 10.0

Proposed Action

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.

Ransomware Campaign

Unknown

References

Products affected by CVE-2026-5430

Wso2 » Api Control Plane » Version: 4.5.0

cpe:2.3:a:wso2:api_control_plane:4.5.0
Wso2 » Api Control Plane » Version: 4.5.0.10

cpe:2.3:a:wso2:api_control_plane:4.5.0.10
Wso2 » Api Control Plane » Version: 4.5.0.18

cpe:2.3:a:wso2:api_control_plane:4.5.0.18
Wso2 » Api Control Plane » Version: 4.5.0.21

cpe:2.3:a:wso2:api_control_plane:4.5.0.21
Wso2 » Api Control Plane » Version: 4.5.0.29

cpe:2.3:a:wso2:api_control_plane:4.5.0.29
Wso2 » Api Control Plane » Version: 4.5.0.39

cpe:2.3:a:wso2:api_control_plane:4.5.0.39
Wso2 » Api Control Plane » Version: 4.5.0.44

cpe:2.3:a:wso2:api_control_plane:4.5.0.44
Wso2 » Api Control Plane » Version: 4.5.0.45

cpe:2.3:a:wso2:api_control_plane:4.5.0.45
Wso2 » Api Control Plane » Version: 4.5.0.49

cpe:2.3:a:wso2:api_control_plane:4.5.0.49
Wso2 » Api Control Plane » Version: 4.5.0.50

cpe:2.3:a:wso2:api_control_plane:4.5.0.50
Wso2 » Api Control Plane » Version: 4.5.0.55

cpe:2.3:a:wso2:api_control_plane:4.5.0.55
Wso2 » Api Control Plane » Version: 4.5.0.56

cpe:2.3:a:wso2:api_control_plane:4.5.0.56
Wso2 » Api Control Plane » Version: 4.6.0

cpe:2.3:a:wso2:api_control_plane:4.6.0
Wso2 » Api Control Plane » Version: 4.6.0.13

cpe:2.3:a:wso2:api_control_plane:4.6.0.13
Wso2 » Api Control Plane » Version: 4.6.0.14

cpe:2.3:a:wso2:api_control_plane:4.6.0.14
Wso2 » Api Control Plane » Version: 4.6.0.19

cpe:2.3:a:wso2:api_control_plane:4.6.0.19
Wso2 » Api Control Plane » Version: 4.6.0.20

cpe:2.3:a:wso2:api_control_plane:4.6.0.20
Wso2 » Api Control Plane » Version: 4.6.0.3

cpe:2.3:a:wso2:api_control_plane:4.6.0.3
Wso2 » Api Control Plane » Version: 4.6.0.8

cpe:2.3:a:wso2:api_control_plane:4.6.0.8
Wso2 » Api Control Plane » Version: 4.6.0.9

cpe:2.3:a:wso2:api_control_plane:4.6.0.9
Wso2 » Api Manager » Version: 4.2.0

cpe:2.3:a:wso2:api_manager:4.2.0
Wso2 » Api Manager » Version: 4.2.0.100

cpe:2.3:a:wso2:api_manager:4.2.0.100
Wso2 » Api Manager » Version: 4.2.0.108

cpe:2.3:a:wso2:api_manager:4.2.0.108
Wso2 » Api Manager » Version: 4.2.0.127

cpe:2.3:a:wso2:api_manager:4.2.0.127
Wso2 » Api Manager » Version: 4.2.0.138

cpe:2.3:a:wso2:api_manager:4.2.0.138
Wso2 » Api Manager » Version: 4.2.0.144

cpe:2.3:a:wso2:api_manager:4.2.0.144
Wso2 » Api Manager » Version: 4.2.0.150

cpe:2.3:a:wso2:api_manager:4.2.0.150
Wso2 » Api Manager » Version: 4.2.0.153

cpe:2.3:a:wso2:api_manager:4.2.0.153
Wso2 » Api Manager » Version: 4.2.0.156

cpe:2.3:a:wso2:api_manager:4.2.0.156
Wso2 » Api Manager » Version: 4.2.0.157

cpe:2.3:a:wso2:api_manager:4.2.0.157
Wso2 » Api Manager » Version: 4.2.0.164

cpe:2.3:a:wso2:api_manager:4.2.0.164
Wso2 » Api Manager » Version: 4.2.0.169

cpe:2.3:a:wso2:api_manager:4.2.0.169
Wso2 » Api Manager » Version: 4.2.0.171

cpe:2.3:a:wso2:api_manager:4.2.0.171
Wso2 » Api Manager » Version: 4.2.0.173

cpe:2.3:a:wso2:api_manager:4.2.0.173
Wso2 » Api Manager » Version: 4.2.0.176

cpe:2.3:a:wso2:api_manager:4.2.0.176
Wso2 » Api Manager » Version: 4.2.0.178

cpe:2.3:a:wso2:api_manager:4.2.0.178
Wso2 » Api Manager » Version: 4.2.0.179

cpe:2.3:a:wso2:api_manager:4.2.0.179
Wso2 » Api Manager » Version: 4.2.0.182

cpe:2.3:a:wso2:api_manager:4.2.0.182
Wso2 » Api Manager » Version: 4.2.0.183

cpe:2.3:a:wso2:api_manager:4.2.0.183
Wso2 » Api Manager » Version: 4.2.0.184

cpe:2.3:a:wso2:api_manager:4.2.0.184
Wso2 » Api Manager » Version: 4.2.0.188

cpe:2.3:a:wso2:api_manager:4.2.0.188
Wso2 » Api Manager » Version: 4.2.0.189

cpe:2.3:a:wso2:api_manager:4.2.0.189
Wso2 » Api Manager » Version: 4.2.0.194

cpe:2.3:a:wso2:api_manager:4.2.0.194
Wso2 » Api Manager » Version: 4.2.0.195

cpe:2.3:a:wso2:api_manager:4.2.0.195
Wso2 » Api Manager » Version: 4.2.0.80

cpe:2.3:a:wso2:api_manager:4.2.0.80
Wso2 » Api Manager » Version: 4.3.0

cpe:2.3:a:wso2:api_manager:4.3.0
Wso2 » Api Manager » Version: 4.3.0.100

cpe:2.3:a:wso2:api_manager:4.3.0.100
Wso2 » Api Manager » Version: 4.3.0.105

cpe:2.3:a:wso2:api_manager:4.3.0.105
Wso2 » Api Manager » Version: 4.3.0.106

cpe:2.3:a:wso2:api_manager:4.3.0.106
Wso2 » Api Manager » Version: 4.3.0.16

cpe:2.3:a:wso2:api_manager:4.3.0.16
Wso2 » Api Manager » Version: 4.3.0.39

cpe:2.3:a:wso2:api_manager:4.3.0.39
Wso2 » Api Manager » Version: 4.3.0.51

cpe:2.3:a:wso2:api_manager:4.3.0.51
Wso2 » Api Manager » Version: 4.3.0.55

cpe:2.3:a:wso2:api_manager:4.3.0.55
Wso2 » Api Manager » Version: 4.3.0.57

cpe:2.3:a:wso2:api_manager:4.3.0.57
Wso2 » Api Manager » Version: 4.3.0.65

cpe:2.3:a:wso2:api_manager:4.3.0.65
Wso2 » Api Manager » Version: 4.3.0.66

cpe:2.3:a:wso2:api_manager:4.3.0.66
Wso2 » Api Manager » Version: 4.3.0.67

cpe:2.3:a:wso2:api_manager:4.3.0.67
Wso2 » Api Manager » Version: 4.3.0.70

cpe:2.3:a:wso2:api_manager:4.3.0.70
Wso2 » Api Manager » Version: 4.3.0.74

cpe:2.3:a:wso2:api_manager:4.3.0.74
Wso2 » Api Manager » Version: 4.3.0.81

cpe:2.3:a:wso2:api_manager:4.3.0.81
Wso2 » Api Manager » Version: 4.3.0.83

cpe:2.3:a:wso2:api_manager:4.3.0.83
Wso2 » Api Manager » Version: 4.3.0.85

cpe:2.3:a:wso2:api_manager:4.3.0.85
Wso2 » Api Manager » Version: 4.3.0.88

cpe:2.3:a:wso2:api_manager:4.3.0.88
Wso2 » Api Manager » Version: 4.3.0.90

cpe:2.3:a:wso2:api_manager:4.3.0.90
Wso2 » Api Manager » Version: 4.3.0.91

cpe:2.3:a:wso2:api_manager:4.3.0.91
Wso2 » Api Manager » Version: 4.3.0.93

cpe:2.3:a:wso2:api_manager:4.3.0.93
Wso2 » Api Manager » Version: 4.3.0.94

cpe:2.3:a:wso2:api_manager:4.3.0.94
Wso2 » Api Manager » Version: 4.3.0.95

cpe:2.3:a:wso2:api_manager:4.3.0.95
Wso2 » Api Manager » Version: 4.3.0.99

cpe:2.3:a:wso2:api_manager:4.3.0.99
Wso2 » Api Manager » Version: 4.4.0

cpe:2.3:a:wso2:api_manager:4.4.0
Wso2 » Api Manager » Version: 4.4.0.28

cpe:2.3:a:wso2:api_manager:4.4.0.28
Wso2 » Api Manager » Version: 4.4.0.29

cpe:2.3:a:wso2:api_manager:4.4.0.29
Wso2 » Api Manager » Version: 4.4.0.30

cpe:2.3:a:wso2:api_manager:4.4.0.30
Wso2 » Api Manager » Version: 4.4.0.33

cpe:2.3:a:wso2:api_manager:4.4.0.33
Wso2 » Api Manager » Version: 4.4.0.38

cpe:2.3:a:wso2:api_manager:4.4.0.38
Wso2 » Api Manager » Version: 4.4.0.45

cpe:2.3:a:wso2:api_manager:4.4.0.45
Wso2 » Api Manager » Version: 4.4.0.47

cpe:2.3:a:wso2:api_manager:4.4.0.47
Wso2 » Api Manager » Version: 4.4.0.49

cpe:2.3:a:wso2:api_manager:4.4.0.49
Wso2 » Api Manager » Version: 4.4.0.52

cpe:2.3:a:wso2:api_manager:4.4.0.52
Wso2 » Api Manager » Version: 4.4.0.54

cpe:2.3:a:wso2:api_manager:4.4.0.54
Wso2 » Api Manager » Version: 4.4.0.55

cpe:2.3:a:wso2:api_manager:4.4.0.55
Wso2 » Api Manager » Version: 4.4.0.57

cpe:2.3:a:wso2:api_manager:4.4.0.57
Wso2 » Api Manager » Version: 4.4.0.58

cpe:2.3:a:wso2:api_manager:4.4.0.58
Wso2 » Api Manager » Version: 4.4.0.59

cpe:2.3:a:wso2:api_manager:4.4.0.59
Wso2 » Api Manager » Version: 4.4.0.63

cpe:2.3:a:wso2:api_manager:4.4.0.63
Wso2 » Api Manager » Version: 4.4.0.64

cpe:2.3:a:wso2:api_manager:4.4.0.64
Wso2 » Api Manager » Version: 4.4.0.69

cpe:2.3:a:wso2:api_manager:4.4.0.69
Wso2 » Api Manager » Version: 4.4.0.70

cpe:2.3:a:wso2:api_manager:4.4.0.70
Wso2 » Api Manager » Version: 4.5.0

cpe:2.3:a:wso2:api_manager:4.5.0
Wso2 » Api Manager » Version: 4.5.0.11

cpe:2.3:a:wso2:api_manager:4.5.0.11
Wso2 » Api Manager » Version: 4.5.0.12

cpe:2.3:a:wso2:api_manager:4.5.0.12
Wso2 » Api Manager » Version: 4.5.0.14

cpe:2.3:a:wso2:api_manager:4.5.0.14
Wso2 » Api Manager » Version: 4.5.0.17

cpe:2.3:a:wso2:api_manager:4.5.0.17
Wso2 » Api Manager » Version: 4.5.0.20

cpe:2.3:a:wso2:api_manager:4.5.0.20
Wso2 » Api Manager » Version: 4.5.0.28

cpe:2.3:a:wso2:api_manager:4.5.0.28
Wso2 » Api Manager » Version: 4.5.0.30

cpe:2.3:a:wso2:api_manager:4.5.0.30
Wso2 » Api Manager » Version: 4.5.0.32

cpe:2.3:a:wso2:api_manager:4.5.0.32
Wso2 » Api Manager » Version: 4.5.0.35

cpe:2.3:a:wso2:api_manager:4.5.0.35
Wso2 » Api Manager » Version: 4.5.0.37

cpe:2.3:a:wso2:api_manager:4.5.0.37
Wso2 » Api Manager » Version: 4.5.0.38

cpe:2.3:a:wso2:api_manager:4.5.0.38
Wso2 » Api Manager » Version: 4.5.0.41

cpe:2.3:a:wso2:api_manager:4.5.0.41
Wso2 » Api Manager » Version: 4.5.0.43

cpe:2.3:a:wso2:api_manager:4.5.0.43
Wso2 » Api Manager » Version: 4.5.0.44

cpe:2.3:a:wso2:api_manager:4.5.0.44
Wso2 » Api Manager » Version: 4.5.0.48

cpe:2.3:a:wso2:api_manager:4.5.0.48
Wso2 » Api Manager » Version: 4.5.0.49

cpe:2.3:a:wso2:api_manager:4.5.0.49
Wso2 » Api Manager » Version: 4.5.0.54

cpe:2.3:a:wso2:api_manager:4.5.0.54
Wso2 » Api Manager » Version: 4.5.0.55

cpe:2.3:a:wso2:api_manager:4.5.0.55
Wso2 » Api Manager » Version: 4.5.0.9

cpe:2.3:a:wso2:api_manager:4.5.0.9
Wso2 » Api Manager » Version: 4.6.0

cpe:2.3:a:wso2:api_manager:4.6.0
Wso2 » Api Manager » Version: 4.6.0.1

cpe:2.3:a:wso2:api_manager:4.6.0.1
Wso2 » Api Manager » Version: 4.6.0.12

cpe:2.3:a:wso2:api_manager:4.6.0.12
Wso2 » Api Manager » Version: 4.6.0.13

cpe:2.3:a:wso2:api_manager:4.6.0.13
Wso2 » Api Manager » Version: 4.6.0.18

cpe:2.3:a:wso2:api_manager:4.6.0.18
Wso2 » Api Manager » Version: 4.6.0.19

cpe:2.3:a:wso2:api_manager:4.6.0.19
Wso2 » Api Manager » Version: 4.6.0.2

cpe:2.3:a:wso2:api_manager:4.6.0.2
Wso2 » Api Manager » Version: 4.6.0.3

cpe:2.3:a:wso2:api_manager:4.6.0.3
Wso2 » Api Manager » Version: 4.6.0.6

cpe:2.3:a:wso2:api_manager:4.6.0.6
Wso2 » Api Manager » Version: 4.6.0.7

cpe:2.3:a:wso2:api_manager:4.6.0.7
Wso2 » Api Manager » Version: 4.6.0.8

cpe:2.3:a:wso2:api_manager:4.6.0.8
Wso2 » Traffic Manager » Version: 4.5.0

cpe:2.3:a:wso2:traffic_manager:4.5.0
Wso2 » Traffic Manager » Version: 4.5.0.17

cpe:2.3:a:wso2:traffic_manager:4.5.0.17
Wso2 » Traffic Manager » Version: 4.5.0.19

cpe:2.3:a:wso2:traffic_manager:4.5.0.19
Wso2 » Traffic Manager » Version: 4.5.0.27

cpe:2.3:a:wso2:traffic_manager:4.5.0.27
Wso2 » Traffic Manager » Version: 4.5.0.37

cpe:2.3:a:wso2:traffic_manager:4.5.0.37
Wso2 » Traffic Manager » Version: 4.5.0.42

cpe:2.3:a:wso2:traffic_manager:4.5.0.42
Wso2 » Traffic Manager » Version: 4.5.0.43

cpe:2.3:a:wso2:traffic_manager:4.5.0.43
Wso2 » Traffic Manager » Version: 4.5.0.47

cpe:2.3:a:wso2:traffic_manager:4.5.0.47
Wso2 » Traffic Manager » Version: 4.5.0.48

cpe:2.3:a:wso2:traffic_manager:4.5.0.48
Wso2 » Traffic Manager » Version: 4.5.0.53

cpe:2.3:a:wso2:traffic_manager:4.5.0.53
Wso2 » Traffic Manager » Version: 4.5.0.54

cpe:2.3:a:wso2:traffic_manager:4.5.0.54
Wso2 » Traffic Manager » Version: 4.5.0.9

cpe:2.3:a:wso2:traffic_manager:4.5.0.9
Wso2 » Traffic Manager » Version: 4.6.0

cpe:2.3:a:wso2:traffic_manager:4.6.0
Wso2 » Traffic Manager » Version: 4.6.0.12

cpe:2.3:a:wso2:traffic_manager:4.6.0.12
Wso2 » Traffic Manager » Version: 4.6.0.13

cpe:2.3:a:wso2:traffic_manager:4.6.0.13
Wso2 » Traffic Manager » Version: 4.6.0.18

cpe:2.3:a:wso2:traffic_manager:4.6.0.18
Wso2 » Traffic Manager » Version: 4.6.0.19

cpe:2.3:a:wso2:traffic_manager:4.6.0.19
Wso2 » Traffic Manager » Version: 4.6.0.3

cpe:2.3:a:wso2:traffic_manager:4.6.0.3
Wso2 » Traffic Manager » Version: 4.6.0.7

cpe:2.3:a:wso2:traffic_manager:4.6.0.7
Wso2 » Traffic Manager » Version: 4.6.0.8

cpe:2.3:a:wso2:traffic_manager:4.6.0.8
Wso2 » Universal Gateway » Version: 4.5.0

cpe:2.3:a:wso2:universal_gateway:4.5.0
Wso2 » Universal Gateway » Version: 4.5.0.17

cpe:2.3:a:wso2:universal_gateway:4.5.0.17
Wso2 » Universal Gateway » Version: 4.5.0.19

cpe:2.3:a:wso2:universal_gateway:4.5.0.19
Wso2 » Universal Gateway » Version: 4.5.0.27

cpe:2.3:a:wso2:universal_gateway:4.5.0.27
Wso2 » Universal Gateway » Version: 4.5.0.37

cpe:2.3:a:wso2:universal_gateway:4.5.0.37
Wso2 » Universal Gateway » Version: 4.5.0.42

cpe:2.3:a:wso2:universal_gateway:4.5.0.42
Wso2 » Universal Gateway » Version: 4.5.0.44

cpe:2.3:a:wso2:universal_gateway:4.5.0.44
Wso2 » Universal Gateway » Version: 4.5.0.48

cpe:2.3:a:wso2:universal_gateway:4.5.0.48
Wso2 » Universal Gateway » Version: 4.5.0.49

cpe:2.3:a:wso2:universal_gateway:4.5.0.49
Wso2 » Universal Gateway » Version: 4.5.0.54

cpe:2.3:a:wso2:universal_gateway:4.5.0.54
Wso2 » Universal Gateway » Version: 4.5.0.55

cpe:2.3:a:wso2:universal_gateway:4.5.0.55
Wso2 » Universal Gateway » Version: 4.5.0.9

cpe:2.3:a:wso2:universal_gateway:4.5.0.9
Wso2 » Universal Gateway » Version: 4.6.0

cpe:2.3:a:wso2:universal_gateway:4.6.0
Wso2 » Universal Gateway » Version: 4.6.0.12

cpe:2.3:a:wso2:universal_gateway:4.6.0.12
Wso2 » Universal Gateway » Version: 4.6.0.13

cpe:2.3:a:wso2:universal_gateway:4.6.0.13
Wso2 » Universal Gateway » Version: 4.6.0.18

cpe:2.3:a:wso2:universal_gateway:4.6.0.18
Wso2 » Universal Gateway » Version: 4.6.0.19

cpe:2.3:a:wso2:universal_gateway:4.6.0.19
Wso2 » Universal Gateway » Version: 4.6.0.3

cpe:2.3:a:wso2:universal_gateway:4.6.0.3
Wso2 » Universal Gateway » Version: 4.6.0.7

cpe:2.3:a:wso2:universal_gateway:4.6.0.7
Wso2 » Universal Gateway » Version: 4.6.0.8

cpe:2.3:a:wso2:universal_gateway:4.6.0.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-5430

Products

Pricing

Contact Us