CISA Warns of Actively Exploited Critical WSO2 Authentication Bypass Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-5430, a critical vulnerability affecting multiple WSO2 products, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation. The flaw carries a CVSS v3.1 score of 10.0 and requires urgent attention from organizations using affected WSO2 API management and gateway deployments. CVE-2026-5430 is a JWT authentication weakness in which the affected mechanism can accept…