CVE-2026-6647 | WSO2 Identity Server/Carbon OAuth Token Revocation access control

October 28, 2026 Yanac

A vulnerability classified as critical has been found in WSO2 Identity Server and Carbon OAuth. This vulnerability affects unknown code of the component Token Revocation. The manipulation leads to improper access controls.

This vulnerability is traded as CVE-2026-6647. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More