⤷ Title: CVE-2025-2905 (CVSS 9.1): Critical XXE Vulnerability Found in WSO2 API Manager
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:37:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #API Manager #CVE_2025_2905 #security advisory #WSO2 #XXE Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:37:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #API Manager #CVE_2025_2905 #security advisory #WSO2 #XXE Vulnerability
Daily CyberSecurity
CVE-2025-2905 (CVSS 9.1): Critical XXE Vulnerability Found in WSO2 API Manager
A critical XXE vulnerability (CVE-2025-2905) in WSO2 API Manager allows attackers to read files and cause DoS. Patch WSO2-2016-0151 is the solution.
⤷ Title: WSO2 Fixes Two Critical Access Control Vulnerabilities (CVE-2025-9804, CVE-2025-10611) Affecting API Manager and Identity Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Oct 2025 00:00:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #API Manager #Auth Bypass #Critical Vulnerability #CVE_2025_10611 #Identity Server #WSO2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Oct 2025 00:00:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Control #API Manager #Auth Bypass #Critical Vulnerability #CVE_2025_10611 #Identity Server #WSO2
Daily CyberSecurity
WSO2 Fixes Two Critical Access Control Vulnerabilities (CVE-2025-9804, CVE-2025-10611) Affecting API Manager and Identity Server
The WSO2 project has released urgent security advisories addressing two critical access control vulnerabilities—CVE-2025-9804 and CVE-2025-10611—that affect multiple enterprise products, including…
⤷ Title: Researcher Details Critical Authentication Bypasses in WSO2 API Manager and Identity Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 00:50:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Manager #Auth Bypass #Critical Vulnerability #CVE_2025_9152 #Identity Server #Regex Flaw #WSO2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 00:50:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Manager #Auth Bypass #Critical Vulnerability #CVE_2025_9152 #Identity Server #Regex Flaw #WSO2
Daily CyberSecurity
Researcher Details Critical Authentication Bypasses in WSO2 API Manager and Identity Server
WSO2 patched three Critical flaws (CVSS 9.8) in API Manager/Identity Server. Flaws in regex access control and case-sensitive HTTP methods allow unauthenticated administrative takeover.
⤷ Title: Implementing OAuth 2.0 Policy in CloudHub 2.0 for API Security
════════════════════════
𐀪 Author: Prowess Software Solutions
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 12:34:13 GMT
════════════════════════
⌗ Tags: #api_manager #api_security #mulesoft_cloudhub #mulesoft_integration #oauth
════════════════════════
𐀪 Author: Prowess Software Solutions
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 12:34:13 GMT
════════════════════════
⌗ Tags: #api_manager #api_security #mulesoft_cloudhub #mulesoft_integration #oauth
Medium
Implementing OAuth 2.0 Policy in CloudHub 2.0 for API Security
Introduction: Why OAuth 2.0 Is Critical for Modern API Security
⤷ Title: CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 13:04:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #API Manager #Authentication Bypass #CVE_2026_1728 #CVE_2026_5430 #privilege escalation #WSO2
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 13:04:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #API Manager #Authentication Bypass #CVE_2026_1728 #CVE_2026_5430 #privilege escalation #WSO2
Daily CyberSecurity
CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10
TL;DR WSO2 disclosed four critical vulnerabilities across its API and identity products. Several are WSO2 account takeover flaws. The worst, CVE-2026-5430, scores a maximum 10 through a JWT authen…