Critical Vulnerability in WSO2 API Manager and Identity Server: CVE-2026-4052
A critical vulnerability (CVE-2026-4052, CVSS 9.8) in WSO2 API Manager and Identity Server allows self-registered users to gain unauthorized access to System REST APIs. Deployments with WSO2 Identity Server configured as a Resident Key Manager with database sharing are affected. Immediate patching is recommended.