WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

Reported by The Hacker News (info@thehackernews.com (The Hacker News))

Summary by Cyber Security News25 Sep 2026, 06:46 CEST

About this summary. This is a short, independently written summary of an article first published by The Hacker News. Cyber Security News did not report or verify the underlying story. Read the original: https://thehackernews.com/2026/09/wso2-and-adobe-commerce-flaws-exploited.html

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-5430 (CVS score: 9.8) - A path traversal vulnerability in WSO2 API Control Plane,

Read the full article at The Hacker News →

Source attribution: headline and facts are from The Hacker News (thehackernews.com). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild