boxscore/security
VENDOR · referenceVendors · latest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

Wso2

Vendor reference — Wso2 · sector: Other. Cumulative disclosure record across the archive.

Follow Wso2 — Atom feed

Career totals

Disclosures & known-exploited
All-timeYTD
CVEs3736
KEV entries11
Rate & severity
KEV/100Med CVSSMed EPSSCHML
2.76.1.003078174

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over all disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▁▁▁▁▁▁▁▁▂▁▁▁▁▃█▄▂

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-110
2025-120
2026-010
2026-022
2026-030
2026-040
2026-050
2026-061
2026-075
2026-0819
2026-097
2026-102

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-543010.047.0CRITICALYES2026-08-06
CVE-2025-135909.154.7CRITICAL—2026-02-19
CVE-2026-34189.154.5CRITICAL—2026-08-06
CVE-2025-150399.450.9CRITICAL—2026-08-06
CVE-2025-121077.251.0HIGH—2026-02-19
CVE-2026-42498.645.2HIGH—2026-07-06
CVE-2024-80085.243.6MEDIUM—2025-06-02
CVE-2026-34158.740.5HIGH—2026-08-06
CVE-2026-17289.840.2CRITICAL—2026-08-06
CVE-2025-145619.034.2CRITICAL—2026-08-06
CVE-2024-68327.534.1HIGH—2026-08-06
CVE-2026-205310.032.0CRITICAL—2026-06-26
CVE-2026-34167.528.0HIGH—2026-09-03
CVE-2025-139094.326.8MEDIUM—2026-08-06
CVE-2024-65416.825.9MEDIUM—2026-08-06

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2024-4457————2026-10-18
CVE-2024-81225.915.8MEDIUM—2026-10-08
CVE-2025-58025.315.3MEDIUM—2026-09-15
CVE-2026-195157.02.9HIGH—2026-09-15
CVE-2025-131663.711.4LOW—2026-09-15
CVE-2026-41036.421.4MEDIUM—2026-09-14
CVE-2026-30964.719.9MEDIUM—2026-09-10
CVE-2026-34167.528.0HIGH—2026-09-03
CVE-2025-127378.412.0HIGH—2026-09-03
CVE-2026-543010.047.0CRITICALYES2026-08-06
CVE-2026-34189.154.5CRITICAL—2026-08-06
CVE-2026-34158.740.5HIGH—2026-08-06
CVE-2024-65416.825.9MEDIUM—2026-08-06
CVE-2025-65084.319.0MEDIUM—2026-08-06
CVE-2025-145619.034.2CRITICAL—2026-08-06

Products

This vendor's products with a reference page (≥2 disclosures), by CVE count. A monolithic vendor total dilutes signal; product pages sharpen it.

Products (by CVE count)
ProductCVEsKEV
WSO2 API Manager281
WSO2 Identity Server220
WSO2 API Control Plane211
WSO2 Traffic Manager171
WSO2 Universal Gateway171
WSO2 Identity Server As Key Manager130
WSO2 Open Banking IAM130
WSO2 Open Banking AM120
WSO2 Enterprise Integrator60
WSO2 Carbon API Management Implementation30
WSO2 Carbon API Manager Rest API Utility31
WSO2 Carbon Identity Application Authentication Framework30
WSO2 Carbon Identity User Store Configuration UI20
WSO2 Carbon OAuth20
WSO2 Carbon User Manager Kernel20

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2026-54302026-09-2410.047.0CRITICAL

KEV timing

Fastest to KEV
CVEDays
CVE-2026-543049
Longest unpatched (KEV due date passed)
CVEDueDays over
CVE-2026-54302026-09-2722

Methodology

Rate statistics are arithmetic over published figures: KEV/100 = KEV entries ÷ CVEs × 100; medians are taken over this vendor's disclosures. Vendor names are normalized (case, punctuation, common aliases) before aggregation; monthly counts are keyed to first-seen day, the day this archive first observed the record, not the upstream publication date.

Raw counts are not comparable across vendors: disclosure practices, product breadth, and CNA conventions differ widely, so a larger number here does not mean less secure software. This is a reference page assembled from the public record — not a record of its own, and not a ranking of vendors by our judgment.

Sources. CVE records from the CVE Program (cvelistV5); enrichment from NVD (NIST); known-exploited status from the CISA KEV catalog; exploit probability from FIRST EPSS.