Skip to content
COOEY

FAIL › dossier

WSO2

VENDOR

· dossier confidence 20%

WSO2 is a major API management vendor with a severe security track record of critical RCE and path traversal vulnerabilities that are actively exploited in the wild. Their recent CVE-2026-5430 was added to CISA's KEV catalog, confirming active exploitation of unpatched systems in finance, healthcare, and government sectors.

Failure events
2
Zero-days
0
RCEs
2
On KEV
2
Critical
1
Worst shame
95
PROFILE
CategoryAPI Management & Integration PlatformWhat they doWSO2 provides open-source and commercial API management, integration, and identity platforms for enterprises. Websitehttps://wso2.com ↗
SECURITY POSTURE

WSO2 has a poor security track record, with critical remote code execution and path traversal vulnerabilities actively exploited in the wild, including recent CISA KEV additions.

Notable failures
  • CVE-2022-29464 critical RCE
  • CVE-2026-5430 critical path traversal RCE
  • CVE-2026-5430 active exploitation in wild
Patterns: repeated critical RCE and path traversal vulnerabilities; active exploitation of unpatched vulnerabilities; JWT authentication bypasses
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2022-04-25 CVE-2022-29464 critical WSO2 products have a critical vulnerability allowing unrestricted file uploads and remote code execution, actively exploited in ransomware attacks.
2026-09-24 CVE-2026-5430 high WSO2 API products suffered a path traversal vulnerability allowing unrestricted file uploads and remote code execution.
DOSSIER SOURCES
Open questions: WSO2's current patch SLA and vulnerability disclosure process · Number of active CVE-2026-5430 exploitation attempts in the wild
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-25 04:27:26.039823+00:00