CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
CISA says attackers are exploiting critical WSO2 and Adobe Commerce flaws plus SharePoint and MikroTik bugs.
CISA warned that attackers are exploiting four flaws and added them to the Known Exploited Vulnerabilities catalog. CVE-2026-5430 is a maximum-severity JWT authentication bypass in WSO2 API Manager 4.1.0 through 4.6.0 and related 4.5.0 and 4.6.0 components that can give full administrative control. CVE-2026-71362 is a critical incorrect-authorization bug in Adobe Commerce and Magento that Sansec says requires no account or user interaction. Federal agencies must mitigate the two critical issues by September 27 and SharePoint code-injection CVE-2026-65660 plus MikroTik RouterOS SSH bypass CVE-2026-67279 by September 28.
- CVE-2026-5430 lets forged JWTs bypass WSO2 authentication and seize admin accounts.
- watchTowr honeypots saw limited forged-token attempts on September 13 from one IP.
- Sansec reports Adobe Commerce CVE-2026-71362 exploited with no account or interaction.
- SharePoint CVE-2026-65660 and MikroTik CVE-2026-67279 are due September 28.
- WSO2 is used by nearly 1,000 banking, government, telecom, and logistics customers.
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-5430 | Unauthenticated JWT Algorithm Bypass in WSO2 API Manager and Gateways | 10.0 | 22% | KEVPoC ×2 | KEV |
| CVE-2026-65660 | Authenticated Code Injection RCE in Microsoft SharePoint Server | 8.8 | 10% | KEVPoC ×2 | KEV |
| CVE-2026-67279 | Unauthenticated SSH Session Bypass Enables File Writes in MikroTik RouterOS | 6.9 | 2% | KEVPoC ×4 | KEV |
| CVE-2026-71362 | Unauthenticated Privilege Escalation Flaw in Adobe Commerce (Magento) | 9.1 | 92% | KEVPoC | KEV |
From the original article
2 min read at bleepingcomputer.com
The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.