All 3 CVE vulnerabilities found in WSO2 Universal Gateway, with AI-generated Chinese analysis, references, and POCs.
Vendor: WSO2
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-7203 | Sensitive Information Disclosure via Management Console and Product Files in Multiple WSO2 Products Allows Retrieval of Credentials CWE-312 | 4.9 | Medium | 2026-10-19 |
| CVE-2026-5430 | Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover CWE-347 | 10.0 | Critical | 2026-08-06 |
| CVE-2026-4249 | Denial of Service via Malicious JSON Payloads in Throttling Events in Multiple WSO2 Products Causing Persistent Service Disruption CWE-707 | 8.6 | High | 2026-07-06 |
All 3 known CVE vulnerabilities affecting WSO2 Universal Gateway with full Chinese analysis, references, and POCs where available.