Question 1

What is CVE-2026-105986 — CVE-2026-105986?

Accepted Answer

Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate privileges via a percent-encoded role name or a self-assigned role.

Question 2

What is the authoritative source for CVE-2026-105986?

Accepted Answer

CVE-2026-105986 (CVE-2026-105986) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-105986CVE-2026-105986

Description

Scoring