WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

🗓️ 25 Sep 2026 04:46:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 3 Views

Path traversal in WSO2 and incorrect authorization in Adobe Commerce allow RCE or data access.

Reporter	Title	Published	Views	Family All 30
attackerkb	CVE-2026-5430	6 Aug 202607:33	–	attackerkb
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, arises from deficiencies in authentication mechanisms, allowing attackers to escalate their privileges.	19 Aug 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WSO2 platform for integrating application programming interfaces, applications, and web services stems from errors in verifying cryptographic signatures. This allows attackers to gain unauthorized access and steal user accounts.	17 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-5430	30 Jun 202602:45	–	circl
Circl	CVE-2026-71362	11 Aug 202618:31	–	circl
CISA KEV Catalog	WSO2 Multiple Products Path Traversal Vulnerability	24 Sep 202600:00	–	cisa_kev
CISA KEV Catalog	Adobe Commerce and Magento Incorrect Authorization Vulnerability	24 Sep 202600:00	–	cisa_kev
CVE	CVE-2026-5430	6 Aug 202607:33	–	cve
CVE	CVE-2026-71362	11 Aug 202617:52	–	cve
Cvelist	CVE-2026-5430 Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover	6 Aug 202607:33	–	cvelist

25 Sep 2026 09:51Current

8.5High risk

Vulners AI Score8.5

CVSS 3.110

EPSS0.89616

SSVC

WSO2 Adobe Commerce Magento path traversal remote code execution incorrect authorization