Known Vulnerabilities for Api Control Plane by Wso2
Listed below are 10 of the newest known vulnerabilities associated with "Api Control Plane" by "Wso2".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115707 json | Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) c... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-115706 json | Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-113619 json | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitu... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-112268 json | sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of the dat... | Not Provided | 2026-10-19 | 2026-10-22 |
| CVE-2026-108372 json | Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From versi... | Not Provided | 2026-10-16 | 2026-10-21 |
| CVE-2026-105634 json | Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial_update method allows any pr... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105633 json | Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issue_id in t... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105312 json | A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary... | Not Provided | 2026-10-20 | 2026-11-03 |
| CVE-2026-104969 json | Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104939 json | Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress ... | Not Provided | 2026-10-14 | 2026-10-15 |