CVE-2026-5430

CVE

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

September 16, 2026

Last Seen

September 17, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical WSO2 API Manager Vulnerability Under Active Exploitation80.8

A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffi...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical WSO2 API Manager Vulnerability Under Active Exploitation

Sep 16·10 sources

Related Articles (5)

WSO2 API Manager

exploitbulletin.com·Sep 17

The Exploit Bulletin — Wednesday, September 16, 2026: 4 issues require action

Buttondown·Sep 17

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability

Securityweek·Sep 16

Vulnerability in open

Cyberdaily.Au·Sep 16

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Thehackernews·Sep 16

Related Entities

Data Breach WSO2 CVE-2026-89026 CVE-2026-39987 CWE-287 - Improper Authentication CWE-78 - OS Command Injection CWE-798 - Use of Hard-coded Credentials Government T1041 - Exfiltration Over C2 Channel T1134 - Access Token Manipulation T1059 - Command and Scripting Interpreter T1071 - Application Layer Protocol