# cve.now: Kong Inc.

The newest entries naming Kong Inc. as an affected vendor (up to 200), of 25 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-92558](https://cve.now/CVE-2026-92558.md): The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when… (CVSS 6.3)
- [CVE-2026-123041](https://cve.now/CVE-2026-123041.md): The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key… (CVSS 8.2)
- [CVE-2026-92441](https://cve.now/CVE-2026-92441.md): Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on… (CVSS 7.8)
- [CVE-2026-92439](https://cve.now/CVE-2026-92439.md): The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service… (CVSS 7.8)
- [CVE-2026-96437](https://cve.now/CVE-2026-96437.md): The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer… (CVSS 8.2)
- [CVE-2026-92443](https://cve.now/CVE-2026-92443.md): The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or… (CVSS 8.2)
- [CVE-2026-92442](https://cve.now/CVE-2026-92442.md): The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response… (CVSS 8.3)
- [CVE-2026-92545](https://cve.now/CVE-2026-92545.md): The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache… (CVSS 8.7)
- [CVE-2026-92544](https://cve.now/CVE-2026-92544.md): SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against… (CVSS 8.7)
- [CVE-2026-105986](https://cve.now/CVE-2026-105986.md): Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate privileges via a… (CVSS 8.7)
- [CVE-2026-1907](https://cve.now/CVE-2026-1907.md): SQL Injection in Clustering Communication (Hybrid Mode) (CVSS 7.5)
- [CVE-2026-14916](https://cve.now/CVE-2026-14916.md): Kong API Gateway Enterprise: JWT Algorithm-Confusion (CVSS 7.7)
- [CVE-2026-14917](https://cve.now/CVE-2026-14917.md): Kong API Gateway Enterprise: SAML Authentication bypass (CVSS 7.7)
- [CVE-2026-18674](https://cve.now/CVE-2026-18674.md): Kong Mesh multi-zone: the global control plane attributes KDS-synced resources by an unvalidated in-band zone identifier (CVSS 7.0)
- [CVE-2026-18679](https://cve.now/CVE-2026-18679.md): Kong Mesh: kuma-dp connects to the control plane without verifying the TLS certificate when no CA is configured (CVSS 5.8)
- [CVE-2026-18678](https://cve.now/CVE-2026-18678.md): Kong Mesh: kumactl connects to the control plane without verifying the TLS certificate when no CA is configured (CVSS 5.5)
- [CVE-2026-18677](https://cve.now/CVE-2026-18677.md): Kong Mesh: a dataplane token without a workload binding can claim any workload's SPIFFE identity (CVSS 6.0)
- [CVE-2026-18676](https://cve.now/CVE-2026-18676.md): Kong Mesh: default control plane config leaks the admin token cross-origin via a CORS wildcard and localhost admin (CVSS 5.1)
- [CVE-2026-18675](https://cve.now/CVE-2026-18675.md): Kong Mesh: control plane denial of service via a malformed dataplane token with a non-string JWT kid (CVSS 5.3)
- [CVE-2026-18673](https://cve.now/CVE-2026-18673.md): Kong Mesh: the kuma-dp readiness service exposes the Envoy admin API without authentication (CVSS 5.3)
- [CVE-2026-17578](https://cve.now/CVE-2026-17578.md): Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement (CVSS 2.3)
- [CVE-2026-6338](https://cve.now/CVE-2026-6338.md): HTTP request smuggling in Kong Enteprise Gateway (CVSS 4.9)
- [CVE-2025-1087](https://cve.now/CVE-2025-1087.md): Arbitrary Code Execution in Kong Insomnia Desktop Application (CVSS 9.3)
- [CVE-2025-1353](https://cve.now/CVE-2025-1353.md): Kong Insomnia profapi.dll untrusted search path (CVSS 7.3)
- [CVE-2020-36661](https://cve.now/CVE-2020-36661.md): Kong lua-multipart multipart.lua is\_header redos (CVSS 3.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/kong
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.