cyber.hendryadrian.com
Vulnerability & Exploit · thehackernews.com

CISA Adds Actively Exploited WSO2 and Adobe Commerce Flaws to KEV Catalog

· Original article ↗

Summary

CISA added two WSO2 and Adobe Commerce/Magento vulnerabilities to its KEV catalog based on exploitation evidence. The flaws may enable remote code execution or access to customer data; FCEB agencies must patch by September 27, 2026.

Key points

  • CISA added CVE-2026-5430 and CVE-2026-71362 to its Known Exploited Vulnerabilities catalog.
  • CVE-2026-5430 affects several WSO2 products; path traversal could enable unrestricted file upload and remote code execution.
  • CVE-2026-71362 affects Adobe Commerce and Magento; incorrect authorization could expose sensitive customer resources.
  • watchTowr reported in-the-wild exploitation attempts against honeypots since at least September 13, 2026.
  • Sansec said it detected and blocked exploitation attempts in August 2026; Previdian observed an attempt from an Australian IP against honeypots on September 10.
  • Adobe had not updated its advisory to confirm exploitation status at the time of the article.
  • FCEB agencies were directed to apply fixes by September 27, 2026.

Article Details

Vulnerability Types
  • Path traversal
  • Incorrect authorization
Severity
Critical (CVSS 9.8 for CVE-2026-5430; CVSS 9.1 for CVE-2026-71362)
Exploitation Status
active
Exploit Availability
unknown
Patch Status
available

CVE

CVE-2026-5430CISA has added two critical vulnerabilities, CVE-2026-5430 in WSO2 products and CVE-2026-71362 in Adobe Commerce and Magento, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation.CVE-2026-71362CISA has added two critical vulnerabilities, CVE-2026-5430 in WSO2 products and CVE-2026-71362 in Adobe Commerce and Magento, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation.

Vendors

AdobeCISA has added two critical vulnerabilities, CVE-2026-5430 in WSO2 products and CVE-2026-71362 in Adobe Commerce and Magento, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation.WSO2CISA has added two critical vulnerabilities, CVE-2026-5430 in WSO2 products and CVE-2026-71362 in Adobe Commerce and Magento, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation.

Products

Adobe CommerceCISA has added two critical vulnerabilities, CVE-2026-5430 in WSO2 products and CVE-2026-71362 in Adobe Commerce and Magento, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation.API ManagerCVE-2026-5430 affects WSO2 API Control Plane, API Manager, Traffic Manager, and Universal Gateway.MagentoCISA has added two critical vulnerabilities, CVE-2026-5430 in WSO2 products and CVE-2026-71362 in Adobe Commerce and Magento, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation.Traffic ManagerCVE-2026-5430 affects WSO2 API Control Plane, API Manager, Traffic Manager, and Universal Gateway.Universal GatewayCVE-2026-5430 affects WSO2 API Control Plane, API Manager, Traffic Manager, and Universal Gateway.WSO2 API Control PlaneCVE-2026-5430 affects WSO2 API Control Plane, API Manager, Traffic Manager, and Universal Gateway.

Countries

AustraliaPrevidian’s telemetry indicates that a lone IP address from Australia attempted to exploit the flaw targeting its honeypot sensors on September 10, 2026.

Industries

E-commerce“The vulnerability lets attackers switch a customer session to another customer account,” the Dutch e-commerce security company said.

Related Articles