What’s Vulnerable › Products

Kong Enterprise Gateway vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Kong Enterprise Gateway version is affected

Latest Kong Enterprise Gateway vulnerabilities

• CVE-2026-1907 — SQL Injection in Clustering Communication (Hybrid Mode) (CVSS 7.5)
• CVE-2026-14917 — Kong API Gateway Enterprise: SAML Authentication bypass (CVSS 7.7)
• CVE-2026-6338 — HTTP request smuggling in Kong Enteprise Gateway (CVSS 4.9)