Known Vulnerabilities for Api Gateway by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Api Gateway" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103102 json | Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote att... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102806 json | OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that b... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102149 json | Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102146 json | An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with at... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102144 json | A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repea... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102139 json | An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish t... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102138 json | An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector ... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102135 json | On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could submi... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102134 json | Kiteworks Core did not apply its gateway-level API security controls to every request authenticated through the platform's ce... | Not Provided | 2026-09-30 | 2026-10-01 |
| CVE-2026-102131 json | Kiteworks Email Protection Gateway rejected certain configuration settings, but its validation did not recognize every form i... | Not Provided | 2026-09-30 | 2026-10-01 |