Veille CVE

Mardi 29 septembre 2026

1 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « WSO2 API Control Plane » ✕
  1. CVE-2025-14561 9.0 Critique

    WSO2 API Manager · WSO2 API Control Plane · WSO2 Traffic Manager · WSO2 Universal Gateway

    In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a user in one tenant, possessing sufficient privileges to invoke these APIs, to perform operations that impact other tenants. The vulnerability allows a privileged user to perform publisher operations such as exposing or modifying API Metadata in another tenant environment. This impact is only realized in multi-tenant deployments.