CVE-2026-3418

creationtimestamp| type| source ---|---|--- 2026-08-07 00:38:31+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcuo2pnf2j...

CVE-2026-3418

The CVE-2026-3418 entry concerns the System REST API in multiple WSO2 products that allows arbitrary file uploads due to insufficient validation of file type/destination. The vulnerability enables an authenticated publisher (admin with publisher privileges) to upload files to server-accessible lo...