Skip to content

Identity & Access Management · head-to-head

CyberArk vs WSO2

On-prem IAM/IGA/PAM/MFA: directories, federation, privileged access, SSO. Counts are scoped to this segment and the selected published-date window. WSO2 carries 8.0× the disclosed CVE volume of CyberArk. Volume reflects disclosure practice and install base as much as code quality — read it with the severity mix. Sourced from the NIST NVD; lower counts indicate a smaller disclosed vulnerability surface — not necessarily lower risk.

01

Disclosure record

Bars are normalized per row to the larger value; the leading count is emphasized.

Metric comparison: CyberArk versus WSO2. Each row gives the metric, CyberArk’s count on the left and WSO2’s count on the right.
CyberArkMetricWSO2
8Total CVEs64
2Critical9
4High10
2Medium42
0Low3
6Open in latest69
02

Risk profile

Each severity band as a share of the vendor's own total — strips out raw volume so the profiles compare directly.

CyberArk

25.0% critical
Critical
225.0%
High
450.0%
Medium
225.0%
Low
00.0%

WSO2

14.1% critical
Critical
914.1%
High
1015.6%
Medium
4265.6%
Low
34.7%
03

Recent activity

Latest in-window disclosures per vendor, newest first. Each ID links to its NVD record.

CyberArk

Recent CVEs affecting CyberArk
CVESeverityCVSSPublished
CVE-2026-2914(opens NVD record)High
7.8
Feb 25, 2026
CVE-2025-66374(opens NVD record)High
7.8
Feb 3, 2026
CVE-2025-49831(opens NVD record)Critical
9.8
Jul 15, 2025
CVE-2025-49830(opens NVD record)Medium
6.5
Jul 15, 2025
CVE-2025-49829(opens NVD record)Medium
6.5
Jul 15, 2025
CVE-2025-49828(opens NVD record)High
8.8
Jul 15, 2025

WSO2

Recent CVEs affecting WSO2
CVESeverityCVSSPublished
CVE-2026-2053(opens NVD record)High
8.3
Jun 26, 2026
CVE-2025-9973(opens NVD record)Medium
6.4
May 11, 2026
CVE-2025-10470(opens NVD record)High
8.6
May 11, 2026
CVE-2025-8325(opens NVD record)Medium
6.3
May 11, 2026
CVE-2025-8154(opens NVD record)Medium
5.3
May 11, 2026
CVE-2025-10908(opens NVD record)High
7.3
May 11, 2026

Track new CVEs for these vendors

Get an email the moment a new vulnerability is disclosed for the products you rely on.

Get alerts