A vulnerability marked as problematic has been reported in WSO2 API Control Plane, API Manager, Carbon Event Publisher Core, Identity Server, Identity Server as Key Manager, Open Banking AM, Open Banking IAM, Traffic Manager and Universal Gateway. Impacted is an unknown function of the component Event Publisher Output Adapter. Performing a manipulation of the argument properties results in information disclosure.
This vulnerability was named CVE-2026-0637. The attack may be initiated remotely. There is no available exploit.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-0637 | WSO2 API Control Plane Event Publisher Output Adapter properties information disclosure (WID-SEC-2026-2085)
A vulnerability marked as problematic has been reported in WSO2 API Control Plane, API Manager, Carbon Event Publisher Core, Identity Server, Identity Server as Key Manager, Open Banking AM, Open Banking IAM, Traffic Manager and Universal…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR