CVE-2026-3415 | WSO2 API Control Plane SchemaValidator Mediator resource consumption

A vulnerability categorized as problematic has been discovered in WSO2 API Control Plane, API Gateway, API Manager, Carbon API Gateway, Carbon API Management Implementation, Traffic Manager and Universal Gateway. The impacted element is an unknown function of the component SchemaValidator Mediator. Executing a manipulation can lead to resource consumption.

This vulnerability is registered as CVE-2026-3415. It is possible to launch the attack remotely. No exploit is available.