Security5 dSeptember 16, 2026, 12:18

Active exploitation attempts target WSO2 API Manager JWT bypass

A critical vulnerability CVE-2026-5430 (CVSS 9.8) in WSO2 API Manager allows bypassing JWT signature verification and forging admin tokens. According to watchTowr, the flaw is already actively exploited in real attacks and can lead to account takeover.

The Hacker News Open source

Vulnerability CVE-2026-5430 rated CVSS 9.8 out of 10
Issue is improper verification of JWT cryptographic signature
Attacks already observed in the wild per watchTowr
Exploitation allows forging admin tokens and account takeover

#WSO2

Contagious Interview Campaign Hits 30,000 Devices, Steals $10.71M in Crypto

Security

Google Releases AndroidX Libraries for Granular Android Patch Checks

Security

Surfshark: iPhone lets you delete 98% of preinstalled apps, Google only 38%

Security

Active exploitation attempts target WSO2 API Manager JWT bypass

Contagious Interview Campaign Hits 30,000 Devices, Steals $10.71M in Crypto

Google Releases AndroidX Libraries for Granular Android Patch Checks

Surfshark: iPhone lets you delete 98% of preinstalled apps, Google only 38%

Hackers extract 1.6 million images and 27,000 videos from a single Flock camera