← Database

CVE-2026-105986

N/A CVSS: N/A Published: 2026-11-10 Modified: 2026-11-10

Description

Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate  privileges via a percent-encoded role name or a self-assigned role.

Affected Platforms

Unknown

Weakness Type

CWE-863

References