> TritonInfoSec News
Home / Sep 17, 2026 / Story
0
#2 The Hacker News general September 16, 2026 at 05:18 UTC

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

By [email protected] (The Hacker News)

AI Summary

CVE-2026-5430 (CVSS 9.8), a critical JWT authentication bypass in WSO2 API Manager that allows forged admin tokens via improper cryptographic signature verification, is under active exploitation in the wild, as confirmed by watchTowr. Attackers with forged admin tokens can gain full control of enterprise API management infrastructure, making immediate patching essential for any organization running WSO2 API Manager.

Read full article → https://thehackernews.com/2026/09/active-exploitat…

Relevance score: 87.0/100

# More from September 17

  1. 1
    Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories The Hacker News
  2. 3
    Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation The Hacker News
  3. 4
    One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude The Hacker News
  4. 5
    Critical ScreenConnect flaw now actively exploited in attacks BleepingComputer
  5. 6
    Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks The Hacker News
  6. 7
    Iranian hackers use CHOSEN BRICK Windows malware to spy on targets BleepingComputer
  7. 8
    Chrome, Firefox Updates Patch 115 Vulnerabilities SecurityWeek
  8. 9
    Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data SecurityWeek
  9. 10
    Oracle Patches 800+ Vulnerabilities in September 2026 Security Update SecurityWeek