Skip to content
Threat Feed
Subscribe

Product

Identity Server (Resident Key Manager Configuration)

1 brief RSS
critical advisory

WSO2 Identity Server and API Manager: Unauthorized System REST API access (CVE-2026-4052)

WSO2 Identity Server configured as a Resident Key Manager with database sharing is susceptible to an authorization issue where self-registered users can obtain tokens to access System REST APIs in WSO2 API Manager.

Identity Server +1
1c