Security1 hOctober 6, 2026, 11:40

CVE-2026-5430: WSO2 API Manager auth bypass rated CVSS 10.0

WSO2 patched CVE-2026-5430 in API Manager in April 2026, but exploitation was observed in September after CISA added it to the KEV catalog. The CVSS 10.0 flaw lets an unauthenticated attacker bypass JWT signature validation and reach administrative functions.

DEV Community

Open source

CVSS 10.0 in multi-tenant deployments and 9.8 in single-tenant
Patch shipped in April 2026, exploitation seen five months later
Affects API Manager, API Control Plane, Traffic Manager and Universal Gateway
Suspected exposure requires rotating consumer keys and secrets

#WSO2

Active exploitation attempts target WSO2 API Manager JWT bypass

Security

Cisco ISE CVE-2026-76460: CVSS 10.0 auth bypass exploited in the wild

Security

Cisco warns of active exploitation of CVSS 9.8 SD-WAN Manager auth bypass

Software

CVE-2026-5430: WSO2 API Manager auth bypass rated CVSS 10.0

Active exploitation attempts target WSO2 API Manager JWT bypass

Cisco ISE CVE-2026-76460: CVSS 10.0 auth bypass exploited in the wild

Cisco warns of active exploitation of CVSS 9.8 SD-WAN Manager auth bypass

WSO2 Releases Agent Manager as Enterprises Look to Control Growing AI Agent Sprawl