CVE-2026-0637

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An Event Publisher output adapter logs irrelevant properties without sufficient validation or sanitization of the property values. An attacker with access to the 'wso2carbon' log files could retrieve sensitive information, such as user credentials or confidential data, that was inadvertently logged due to misconfiguration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.