WSO2 WSO2 Carbon Event Publisher Core

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-18800Information Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive DataMEDIUM 4.4
CVE-2026-0637Sensitive Information Disclosure via Event Publisher Logging in Multiple WSO2 ProductsMEDIUM 4.40.2 %