Apply the latest security patches provided by WSO2. Review and follow WSO2's JWT configuration guidelines to ensure proper signature verification. Monitor official WSO2 security advisories for updates and additional mitigation steps.
The Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The flaws affect WSO2 products and Adobe Commerce, with CISA urging federal agencies and enterprises to apply mitigations immediately.
A critical vulnerability in WSO2 API Manager, tracked as CVE-2026-5430, is under active exploitation. The flaw, which stems from improper verification of cryptographic signatures, allows attackers to forge admin tokens and bypass JWT authentication, potentially leading to account takeover. Organizations using WSO2 API Manager are urged to apply patches immediately.
