Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2026-5430 — WSO2 Multiple Products Path Traversal Vulnerability
WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.
|
WSO2 | Multiple Products | Sep 24, 2026 | Sep 27, 2026 | |
|
CVE-2022-29464 — WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.
|
WSO2 | Multiple Products | Apr 25, 2022 | May 16, 2022 | Ransomware |
WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.
Multiple Products · Sep 24, 2026
Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.
Multiple Products · Apr 25, 2022