Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-14916

Kong API Gateway Enterprise: JWT Algorithm-Confusion

CVSS 4.0 7.7 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-14916

Published

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for verification. As a result, an unauthenticated remote attacker may be able to craft a forged JWT that is incorrectly accepted as valid, leading to authentication bypass and potential compromise of confidentiality, integrity, and availability.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-14916

Published

Kong Enteprise Gateway

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Kong",
                    "product": "Kong Enteprise Gateway",
                    "platforms": [
                        "Linux"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "3.15.0.0",
                            "lessThan": "3.15.0.3",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.14.0.0",
                            "lessThan": "3.14.0.12",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.13.0.0",
                            "lessThan": "3.13.0.9",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.12.0.0",
                            "lessThan": "3.12.0.10",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.10.0.0",
                            "lessThan": "3.10.0.17",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.4.0.0",
                            "lessThan": "3.4.3.29",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON