WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-5430 (CVS score: 9.8) - A path traversal vulnerability in  WSO2 API Control Plane,

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.