CVE-2026-3583 | WSO2 API Control Plane OAuth2 Token Introspection improper authorization

October 28, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in WSO2 API Control Plane, API Manager, Identity Server, Open Banking AM, Open Banking IAM, Traffic Manager and Universal Gateway. Impacted is an unknown function of the component OAuth2 Token Introspection. This manipulation causes improper authorization.

This vulnerability is handled as CVE-2026-3583. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More