CVE-2026-1728

creationtimestamp| type| source ---|---|--- 2026-08-06 08:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dpb5ohyaumqjd 2026-08-06 09:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msfopqzrcd2f 2026-08-06 10:30:26+00:00| seen|...

CVE-2026-1728 Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeover

Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs. Exploitation of this vulnerability allows a low-privileged user to invoke the Admin REST APIs of WSO2 products, potentially leading to full administrative...