{"revision":"3247d4c3cc4e4ce187b8417c3a80f016","evidence":{"cve":"CVE-2026-5430","kev":{"cve":"CVE-2026-5430","product":"Multiple Products","name":"WSO2 Multiple Products Path Traversal Vulnerability","dateAdded":"2026-09-24","dueDate":"2026-09-27","knownRansomwareUse":false,"shortDescription":"WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.","vendor":"WSO2","isMicrosoft":false,"products":[],"advisoryUrl":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5430","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-5430"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"9685225f4db7a8692f90a03a"}}