CVE-2025-11969 - Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions
CVE ID :CVE-2025-11969 Published : Nov. 2, 2026, 6:17 a.m. | 44 minutes ago Description :The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute administrative actions that should be restricted. This weakness permits...