InfraGuard
Sign in Try it now Buy now

Kong vulnerabilities (CVE list)

3 CVEs7.5 max CVSS

Affected version lines

Known vulnerabilities

CVE Title Affected versions CVSS Exploited EPSS Published
CVE-2026-1907 SQL Injection in Clustering Communication (Hybrid Mode) < 3.9.4 7.5 — 2026-10-12
CVE-2023-2418 Konga Login API random values = 2.8.3 5.9 — 2023-04-29
CVE-2020-11710 An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on inter... * — — 2020-04-13
Official website Source code Listing on SolutionMarket

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Try the live demo Buy now

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.

Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).