CVE-2026-1907

CVE-2026-1907 published: A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. The issue can be triggered by sending specially crafted RPC requests to the Control Plane (CP), leading to potential u...

View full NVD advisory → ← Back to CVE watch