Known Exploited Vulnerabilities September 24, 2026 · CISA KEV Catalog

CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-5430 WSO2
Related: CVE-2022-29464: WSO2 Multiple Products Unrestrictive Upload of File Vulnerability Known Exploited Vulnerabilities · Apr 25, 2022
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026