> TritonInfoSec News
Home / Sep 27, 2026 / Story
0
#7 BleepingComputer general September 25, 2026 at 17:24 UTC

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

By Bill Toulas

AI Summary

CISA is warning of active exploitation of CVE-2026-5430, a critical authentication bypass in WSO2 enterprise products, alongside separately exploited flaws in Microsoft SharePoint and Adobe Commerce. WSO2 is widely used as an API gateway and identity provider, meaning exploitation could enable lateral movement into enterprise identity infrastructure.

Read full article → https://www.bleepingcomputer.com/news/security/cis…

Relevance score: 81.0/100

# More from September 27

  1. 1
    Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells The Hacker News
  2. 2
    ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks BleepingComputer
  3. 3
    SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild The Hacker News
  4. 4
    Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack The Hacker News
  5. 5
    Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise The Hacker News
  6. 6
    Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies CyberScoop
  7. 8
    Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials The Hacker News
  8. 9
    Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link The Hacker News
  9. 10
    Roundcube Webmail Vulnerability in Attackers’ Crosshairs SecurityWeek