Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-16 05:18 UTC
  • Importiert: 2026-09-22 08:41 UTC
  • CVSS: 10.0
  • Quelle-ID: thn_global
  • uid_hash: 101927dfd9e63f051a12c3e5946b1e3ead426932b2f180ad74fa2f2c5fa573d8
The Hacker News

Inhalt

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr.

The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw.

"JWT authentication

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-5430

CRITICAL

10

CRITICAL

10

2026-08-06

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste