CISA has added a WSO2 software flaw to its list of vulnerabilities that attackers are already using in real-world attacks. The issue, CVE-2026-5430, is an authentication-bypass bug affecting WSO2 API Manager and related products, meaning attackers can get past login protections and access sensitive systems without valid credentials if organizations have not patched.
Why it matters: Organizations using affected WSO2 products should treat this as urgent because it means attackers may already be targeting exposed systems. Patch immediately, review internet exposure, and check logs for suspicious access.
info@thehackernews.com (The Hacker News)
2026.09.25
100% relevant
The existing tracked stories include the Adobe Commerce KEV event and a separate WSO2 exploitation story, but not this specific KEV-catalog addition for CVE-2026-5430.
← Back to all stories