> TritonInfoSec News
Home / Sep 26, 2026 / Story
0
#5 The Hacker News general September 25, 2026 at 04:46 UTC

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

By [email protected] (The Hacker News)

AI Summary

CISA added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-5430 (CVSS 9.8), a path traversal flaw in WSO2 API Control Plane, and a separate Adobe Commerce/Magento vulnerability, both confirmed as actively exploited. Federal agencies face mandatory remediation deadlines under BOD 22-01, and the WSO2 flaw's near-perfect severity score makes it a high-priority patch target for any enterprise using WSO2 middleware. Security teams should check for indicators of compromise alongside patching.

Read full article → https://thehackernews.com/2026/09/wso2-and-adobe-c…

Relevance score: 82.0/100

# More from September 26

  1. 1
    U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions Krebs on Security
  2. 2
    Kiteworks urges 6-hour server shutdown over potential zero-day attacks BleepingComputer
  3. 3
    Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild The Hacker News
  4. 4
    Hackers steal $351.6 million in Bitget crypto exchange hack BleepingComputer
  5. 6
    ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw BleepingComputer
  6. 7
    ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration SecurityWeek
  7. 8
    Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions The Hacker News
  8. 9
    Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges CyberScoop
  9. 10
    OpenAI agent breached Australian government health website, Albanese says The Record