Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Critical WSO2 Vulnerability Allow Hackers to Gain Full Admin Access

WSO2 has disclosed a critical authentication bypass vulnerability that could allow remote attackers to take over accounts, including administrative accounts, in affected API management products. Tracked as CVE-2026-5430, the flaw has received a CVSS score of 10.0 and requires no authentication or user interaction to exploit. Security Advisory WSO2-2026-5328 details the issue, published on May […]

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability

A critical WSO2 vulnerability tracked as CVE-2026-5430 has been exploited in the wild to gain access to sensitive enterprise data.

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability,… Read more →