WSO2 API Manager

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenSep 16, 2026
Last mentionedSep 25, 2026

Timeline

5 articles · newest first

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

CISA says attackers are exploiting critical WSO2 and Adobe Commerce flaws plus SharePoint and MikroTik bugs.

BleepingComputerSep 25, 17:24 UTC · Sep 25, 2026Exploit / PoCExploitedCVE-2026-5430 CVE-2026-71362 CVE-2026-65660+14 · 1 read

CISA Flags WSO2 Security Flaw Under Active Exploitation

CISA added actively exploited WSO2 flaw CVE-2026-5430, a CVSS 10 path traversal and JWT bug, to KEV.

GBHackersSep 25, 10:14 UTC · Sep 25, 2026Exploit / PoCExploitedCVE-2026-54302 · 1 read

CISA Warns of WSO2 Multiple Products Vulnerability Exploited in Attacks

CISA says attackers are exploiting WSO2 CVE-2026-5430, a path-traversal flaw that can lead to remote code execution.

Cyber Security NewsSep 25, 09:39 UTC · Sep 25, 2026Exploit / PoCExploitedCVE-2026-54302 · 1 read

Critical WSO2 Vulnerability Allow Hackers to Gain Full Admin Access

WSO2 discloses CVE-2026-5430 (CVSS 10.0), an unauthenticated JWT authentication bypass allowing admin account takeover across its API management products.

Cyber Security NewsSep 16, 15:05 UTC · Sep 16, 2026VulnerabilityCVE-2026-54302

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability

Attackers are actively exploiting CVE-2026-5430 (CVSS 10), a WSO2 JWT authentication bypass, to access enterprise API credentials and sensitive data.

SecurityWeekSep 16, 08:39 UTC · Sep 16, 2026Exploit / PoCExploitedCVE-2026-54304 · 3 reads

Related CVEs

by mentions

CVE-2026-543022%10.0
Unauthenticated JWT Algorithm Bypass in WSO2 API Manager and Gateways
published Aug 6, 2026wso2 api managerKEVPoC ×2
CVE-2026-7136292%9.1
Unauthenticated Privilege Escalation Flaw in Adobe Commerce (Magento)
published Aug 11, 2026Adobe Commerce (Magento)KEVPoC
CVE-2026-6566010%8.8
Authenticated Code Injection RCE in Microsoft SharePoint Server
published Aug 11, 2026Microsoft SharePoint ServerKEVPoC ×2
CVE-2026-672792%6.9
Unauthenticated SSH Session Bypass Enables File Writes in MikroTik RouterOS
published Sep 5, 2026MikroTik RouterOS (Long-term branch, v6)KEVPoC ×4

Appears with

WSO2vendor · 5
WSO2 Universal Gatewayproduct · 4
CISAorganization · 3
WSO2 API Control Planeproduct · 2
WSO2 Traffic Managerproduct · 2
watchTowrorganization · 1
Microsoftvendor · 1
WatchTowrvendor · 1
Magentoproduct · 1
MikroTikvendor · 1
Microsoft SharePointproduct · 1
RouterOSproduct · 1
Sansecorganization · 1
Adobevendor · 1
WSO2organization · 1
Adobe Commerceproduct · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 25, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.