CVE-2026-2613 SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service Disruption

The Admin REST API accepts user-supplied input without adequately sanitizing it, allowing it to be included in the structure of SQL statements. A user with administrator privileges can exploit this by influencing the structure of executed SQL statements, enabling blind SQL injection to infer...

CVE-2026-2613

Multiple WSO2 products are affected by a blind SQL injection vulnerability in the Admin REST API . The root cause is the lack of adequate sanitization for user-supplied input, which allows it to be included in the structure of SQL statements. An attacker with administrator privileges can exploit ...