Known Vulnerabilities for Identity Server by Wso2
Listed below are 10 of the newest known vulnerabilities associated with "Identity Server" by "Wso2".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-93999 json | A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access management solution. The... | Not Provided | 2026-09-19 | 2026-09-19 |
| CVE-2026-92787 json | Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all... | Not Provided | 2026-09-16 | 2026-09-19 |
| CVE-2026-90452 json | Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange ... | Not Provided | 2026-09-11 | 2026-09-14 |
| CVE-2026-88018 json | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-86863 json | pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in ... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-82180 json | In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, Ce... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-81029 json | OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServl... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-78254 json | The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths th... | Not Provided | 2026-09-07 | 2026-09-08 |
| CVE-2026-77776 json | Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at seve... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-77002 json | The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is... | Not Provided | 2026-08-22 | 2026-08-23 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Wso2 | Identity Server | 5.9.0 | |||
| Application | Wso2 | Identity Server | 5.8.0 | |||
| Application | Wso2 | Identity Server | 5.7.0 | |||
| Application | Wso2 | Identity Server | 5.6.0 | |||
| Application | Wso2 | Identity Server | 5.5.0 | |||
| Application | Wso2 | Identity Server | 5.4.1 | |||
| Application | Wso2 | Identity Server | 5.4.0 | |||
| Application | Wso2 | Identity Server | 5.3.0 | |||
| Application | Wso2 | Identity Server | 5.2.0 | |||
| Application | Wso2 | Identity Server | 5.10.0 | |||
| Application | Wso2 | Identity Server | 5.1.0 | |||
| Application | Wso2 | Identity Server | 5.0.0 | |||
| Application | Wso2 | Identity Server | 4.6.0 | |||
| Application | Wso2 | Identity Server | 4.5.0 | |||
| Application | Wso2 | Identity Server | 4.1.0 | |||
| Application | Wso2 | Identity Server | 4.0.0 | |||
| Application | Wso2 | Identity Server | 3.2.3 | |||
| Application | Wso2 | Identity Server | 3.2.2 | |||
| Application | Wso2 | Identity Server | 3.2.0 | |||
| Application | Wso2 | Identity Server | 3.0.1 |