Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw. "JWT authentication

Read the full article at thehackernews.com ↗

Mentioned in this article

companyHacktron

Hear about the next one the moment it breaks

BreachFeed watches security news, breach disclosures and government advisories around the clock and alerts you by email, text or push when the organizations and keywords you track come up.

Create a free account Browse the latest news

Link — click to select, then copy:

https://breachfeed.com/article/cmu3q8to97jrvhpu2mefyzrm8