All 10 CVE vulnerabilities found in Kong Gateway Enterprise, with AI-generated Chinese analysis, references, and POCs.
Vendor: Kong Inc.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-92558 | Kong Gateway 插件缓存键未转义导致跨请求缓存 CWE-116 | 6.3 | Medium | 2026-11-10 |
| CVE-2026-123041 | Kong Gateway 企业版缓存头遗漏漏洞 CWE-524 | 8.2 | High | 2026-11-10 |
| CVE-2026-92441 | Kong Gateway 企业版与 AI 版 HTTP 头注入与请求走私漏洞 CWE-93 | 7.8 | High | 2026-11-10 |
| CVE-2026-92439 | Kong Gateway Enterprise SAML 插件 AudienceRestriction 绕过漏洞 CWE-287 | 7.8 | High | 2026-11-10 |
| CVE-2026-96437 | Kong Gateway Enterprise ai-azure-content-safety 插件内容安全绕过漏洞 CWE-636 | 8.2 | High | 2026-11-10 |
| CVE-2026-92443 | Kong Gateway 缓存插件跨用户授权响应泄露漏洞 CWE-524 | 8.2 | High | 2026-11-10 |
| CVE-2026-92442 | Kong Gateway Enterprise graphql-proxy-cache-advanced 缓存信息泄露漏洞 CWE-524 | 8.3 | High | 2026-11-10 |
| CVE-2026-92545 | Kong Gateway 插件缓存键缺失主机名导致跨域缓存 CWE-524 | 8.7 | High | 2026-11-10 |
| CVE-2026-92544 | Kong Gateway 企业版 LLM 计数器 SQL 注入漏洞 CWE-89 | 8.7 | High | 2026-11-10 |
| CVE-2026-105986 | Kong Gateway Enterprise 管理 API RBAC 权限提升漏洞 CWE-863 | 8.7 | High | 2026-11-10 |
All 10 known CVE vulnerabilities affecting Kong Gateway Enterprise with full Chinese analysis, references, and POCs where available.