WSO2

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 16, 2026
Last mentionedSep 25, 2026

Timeline

2 articles · newest first

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

CISA added WSO2 path traversal CVE-2026-5430 and Adobe Commerce authorization flaw CVE-2026-71362 to its KEV catalog amid active exploitation.

The Hacker NewsSep 25, 04:46 UTC · Sep 25, 2026Exploit / PoCExploitedCVE-2026-5430 CVE-2026-713623

Critical WSO2 Vulnerability Allow Hackers to Gain Full Admin Access

WSO2 discloses CVE-2026-5430 (CVSS 10.0), an unauthenticated JWT authentication bypass allowing admin account takeover across its API management products.

Cyber Security NewsSep 16, 15:05 UTC · Sep 16, 2026VulnerabilityCVE-2026-54302

Related CVEs

by mentions

CVE-2026-543022%10.0
Unauthenticated JWT Algorithm Bypass in WSO2 API Manager and Gateways
published Aug 6, 2026wso2 api managerKEVPoC ×2
CVE-2026-7136292%9.1
Unauthenticated Privilege Escalation Flaw in Adobe Commerce (Magento)
published Aug 11, 2026Adobe Commerce (Magento)KEVPoC

Appears with

Adobeorganization · 1
WSO2vendor · 1
WSO2 Universal Gatewayproduct · 1
Magentoorganization · 1
CISAorganization · 1
WSO2 API Managerproduct · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 25, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.