CVE-2026-5430

The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized access. Successful exploitation of this...

PT-2026-53824

Name of the Vulnerable Software and Affected Versions WSO2 API Manager versions 4.1.0 through 4.6.0 WSO2 API Control Plane versions 4.5.0 through 4.6.0 WSO2 Traffic Manager versions 4.5.0 through 4.6.0 WSO2 Universal Gateway versions 4.5.0 through 4.6.0 Description The JWT authentication mechanis...