kong Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by kong

JSON RSS CSV 🔔 Create Alert Trigger

12 October 2026

SQL Injection Vulnerability in Kong Gateway by Kong Technologies
CVE-2026-1907
KongKong Enterprise Gateway7.5HIGH

16 September 2026

JWT Signature Verification Vulnerability in Kong API Gateway Components
CVE-2026-14916
KongKong Enteprise Gateway7.7HIGH
SAML Authentication Bypass in Kong SAML Plugin
CVE-2026-14917
KongKong Enterprise Gateway7.7HIGH

17 August 2026

Cross-zone Isolation Bypass in Kong Mesh Control Plane
CVE-2026-18674
Kong Inc.Kong Mesh7HIGH

9 May 2025

Template Injection Vulnerability in Kong Insomnia Desktop Application
CVE-2025-1087
Kong Inc.Insomnia9.3CRITICAL

16 February 2025

Untrusted Search Path Vulnerability in Kong Insomnia up to Version 10.3.0
CVE-2025-1353
KongInsomnia7.3HIGH

17 December 2020

Docker Image Vulnerability in Kong: Root Access Risk
CVE-2020-35189
KongKong Alpine Docker Image9.8CRITICAL