Skip to content
Vulnerability intelligence

CVE-2026-5430: WSO2 authentication bypass

A forged-token bug and an unauthenticated authorization flaw are both listed as exploited, with federal deadlines from Sept. 27

2026