WSO2 Universal Gateway

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenSep 16, 2026
Last mentionedSep 25, 2026

Timeline

4 articles · newest first

CISA Flags WSO2 Security Flaw Under Active Exploitation

CISA added actively exploited WSO2 flaw CVE-2026-5430, a CVSS 10 path traversal and JWT bug, to KEV.

GBHackersSep 25, 10:14 UTC · Sep 25, 2026Exploit / PoCExploitedCVE-2026-54302 · 1 read

CISA Warns of WSO2 Multiple Products Vulnerability Exploited in Attacks

CISA says attackers are exploiting WSO2 CVE-2026-5430, a path-traversal flaw that can lead to remote code execution.

Cyber Security NewsSep 25, 09:39 UTC · Sep 25, 2026Exploit / PoCExploitedCVE-2026-54302 · 1 read

Critical WSO2 Vulnerability Allow Hackers to Gain Full Admin Access

WSO2 discloses CVE-2026-5430 (CVSS 10.0), an unauthenticated JWT authentication bypass allowing admin account takeover across its API management products.

Cyber Security NewsSep 16, 15:05 UTC · Sep 16, 2026VulnerabilityCVE-2026-54302

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability

Attackers are actively exploiting CVE-2026-5430 (CVSS 10), a WSO2 JWT authentication bypass, to access enterprise API credentials and sensitive data.

SecurityWeekSep 16, 08:39 UTC · Sep 16, 2026Exploit / PoCExploitedCVE-2026-54304 · 3 reads

Related CVEs

by mentions

CVE-2026-543022%10.0
Unauthenticated JWT Algorithm Bypass in WSO2 API Manager and Gateways
published Aug 6, 2026wso2 api managerKEVPoC ×2

Appears with

WSO2 API Managerproduct · 4
WSO2vendor · 4
WSO2 Traffic Managerproduct · 2
CISAorganization · 2
WSO2 API Control Planeproduct · 2
WSO2organization · 1
WatchTowrvendor · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 25, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.