CVE-2025-13591 | WSO2 Identity Server Carbon Abstract OTP Authenticator information disclosure

October 19, 2026 Yanac

A vulnerability identified as problematic has been detected in WSO2 Identity Server. This issue affects some unknown processing of the component Carbon Abstract OTP Authenticator/Email OTP Authenticator. The manipulation leads to information disclosure.

This vulnerability is traded as CVE-2025-13591. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More