CVE-2026-5430Vulnerability
WSO2 Multiple Products Path Traversal Vulnerability
Reported by 7 independent sources · first reported by CISA advisories · last reported
Last reported 12 days ago
Fix due 27 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 47% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
7 reports, newest first · the exact sentence from each-
September 2026 CVE Landscape“CVE-2026-5430”
-
Q3 2026 Vulnerability Trend Report“CVE-2026-5430 An authentication bypass vulnerability in WSO2 API Platform Products that could lead to the compromise of administrator accounts via a tampered JWT.”
-
Risky Bulletin: Intel ends paid bug bounties“CVE-2026-5430 WSO2 Multiple Products Path Traversal”
-
Bulletin d'actualité CERTFR-2026-ACT-041 (28 septembre 2026)“CVE-2026-5430”
-
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog“CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability”
-
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV“CVE-2026-5430 (CVS score: 9.8) - A path traversal vulnerability in WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway that could allow unrestricted file upload and lead to remote code execution.”
-
CISA Adds Two Known Exploited Vulnerabilities to Catalog“CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability”
Indicators reported together
named in the same reportsCopy this indicator · defanged
Also named with it: CVE-2026-71362, CVE-2026-88771, CVE-2026-87902, CVE-2026-65660, CVE-2026-67279, CVE-2026-76460, CVE-2026-93616, CVE-2026-94127, CVE-2026-85706, CVE-2026-85102, CVE-2026-93952, CVE-2026-7273, CVE-2026-84869, CVE-2026-88772, CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-85046, CVE-2026-85880
Thanks — we review every report.