WSO2 API Manager Publisher REST API V4 vulnerabilities

1 vulnerability

Known vulnerabilities in WSO2 API Manager Publisher REST API V4, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.1CVE-2026-3418wso2wso2 api control plane+6
EPSS score
0.76%
The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be written to arbitrary server-accessible locations. Exploitation requires authenticated administrative access with publisher privileges. Successful exploitation permits an authenticated publisher to upload files to server-accessible locations. Depending on the deployment environment and how uploaded files are handled, this could lead to the execution of uploaded content, potentially resulting in remote code execution.