Kong Kong Enterprise Gateway
3 CVEs affecting Kong Kong Enterprise Gateway. Latest disclosed: 2026-10-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-1907 | | 2026-10-12 | A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. The issue can be tri… | |
CVE-2026-14917 | | 2026-09-16 | A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is… | |
CVE-2026-6338 | | 2026-06-11 | A HTTP request smuggling and desynchronization vulnerability affects Kong Gateway Enterprise 3.4, 3.10, 3.11, 3.12, 3.13, and 3.14 series. The vulnerability is… |