Security4 hSeptember 25, 2026, 11:46

CISA adds WSO2 and Adobe Commerce flaws to KEV catalog

CISA added two critical vulnerabilities in WSO2 API Control Plane and Adobe Commerce/Magento to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. The flaws are tracked as CVE-2026-5430 and CVE-2026-5431.

The Hacker News

Open source

CISA adds WSO2 and Adobe Commerce flaws to KEV catalog

CVE-2026-5430 in WSO2 API Control Plane is a path traversal rated 9.8
CVE-2026-5431 affects Adobe Commerce and Magento
CISA confirmed active exploitation of both flaws
Both vulnerabilities were added to the KEV catalog on Thursday

#WSO2#Adobe#Magento#CISA

Researchers Flagged AliExpress Phishing Domains Before Registration

Security

Fixing Flock: controls needed after misuse patterns emerge

Security

Gartner: 41% of CISOs hit by AI deepfake voice calls in past year

Security

CISA adds WSO2 and Adobe Commerce flaws to KEV catalog

Researchers Flagged AliExpress Phishing Domains Before Registration

Fixing Flock: controls needed after misuse patterns emerge

Gartner: 41% of CISOs hit by AI deepfake voice calls in past year

ZoomEye finds 5.1 million hosts exposing VNC port 5900