WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-25 04:46 UTC
Importiert: 2026-10-01 11:28 UTC
CVSS: 10.0
Quelle-ID: thn_global
uid_hash: c962efdefc9ad9b4a022c241d97993b48c837dd9f0684b79b78bc38f4b40ce58

The Hacker News

Inhalt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.

The vulnerabilities are listed below -

CVE-2026-5430 (CVS score: 9.8) - A path traversal vulnerability in WSO2 API Control Plane,

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-5430	CRITICAL	10	CRITICAL	10			2026-08-06

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste