What’s Vulnerable › Products

WSO2 Carbon API Gateway vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WSO2 Carbon API Gateway version is affected

Latest WSO2 Carbon API Gateway vulnerabilities

• CVE-2026-3415 — XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service (CVSS 8.7)