CVE-2025-14260 - Server Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External Resources
CVE ID :CVE-2025-14260 Published : Oct. 28, 2026, 7:21 p.m. | 1 hour, 3 minutes ago Description :Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied input related to resource location without enforcing expected validation constraints. This can be...