Kong Enterprise Gateway
Approved changes feed: RSS · Atom
cpe:2.3:a:kong:kong_enterprise_gateway:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Kong (55adcb01-0fb3-5c86-88ae-05e0515ca57b) |
|---|---|
| Product | Kong Enterprise Gateway (d3c93252-c672-55ae-8ddb-1ad3f5666d6d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14917 |
vulnerable | 2026-10-13 12:28:57.344525 |
Kong API Gateway Enterprise: SAML Authentication bypass
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validate_assertion_signature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without verifying a valid cryptographic signature.
As a result, an unauthenticated remote attacker may be able to submit a crafted SAML response and impersonate arbitrary users, including administrators
Published: 2026-09-16T10:06:07.410Z
Updated: 2026-09-16T13:26:06.116Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6338 |
vulnerable | 2026-07-29 01:06:20.696473 |
HTTP request smuggling in Kong Enteprise Gateway
A HTTP request smuggling and desynchronization vulnerability affects Kong Gateway Enterprise 3.4, 3.10, 3.11, 3.12, 3.13, and 3.14 series. The vulnerability is caused by a parsing flaw in Kong’s HTTP request processing pipeline when handling untrusted HTTP/1.1 traffic.
Published: 2026-06-11T13:47:01.309Z
Updated: 2026-06-11T14:23:21.941Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.