CVE WATCH / VULNERABILITY DETAIL
CVE-2024-7478
MEDIUMCVSS 5.8NVD feed
Published 21 October 2026 · tracked since 22 October 2026
Description
When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This oversight allows an attacker to repeatedly query the authentication mechanism with different username guesses, enabling
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-76462 MEDIUM 5.5
- CVE-2026-20236 HIGH 7.5
- CVE-2026-20291 HIGH 7.8
- CVE-2026-20356 HIGH 7.5
- CVE-2026-20043 CRITICAL 9
- CVE-2026-20179 MEDIUM 5.8
- CVE-2026-20197 MEDIUM 5.8
- CVE-2026-20218 MEDIUM 5.8
- CVE-2026-20221 MEDIUM 5.8
- CVE-2026-20011 MEDIUM 5.8