Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

As cited

Copy frozen at 2026-09-17 01:51 UTC (site build).

vulnerabilities

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

A critical flaw in WSO2 application programming interface (API) Manager tracked as CVE-2026-5430 allows attackers to bypass JWT authentication through forged admin tokens by exploiting improper cryptographic signature verification. The vulnerability, with a CVSS score of 10.0, is actively exploited in the wild and can lead to account takeover.

Why it matters: Organizations running WSO2 API Manager need to assess immediate exposure to account compromise and apply available patches or mitigations, as exploitation is already occurring.

Source published

2026-09-16 05:18 UTC

First seen by Cybersecurity Tracker

2026-09-16 09:00 UTC