A critical security flaw in WSO2 API Manager, tracked as CVE-2026-5430 with a CVSS score of 9.8, is under active exploitation in the wild. The vulnerability stems from improper cryptographic signature verification in JSON Web Tokens, allowing attackers to forge administrator tokens and achieve complete account takeover. Administrators are strongly advised to apply available patches immediately to mitigate the threat.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →