importantSYS.SOURCE: The Hacker News• 2026-09-25T10:16:34+05:30

Critical Vulnerabilities in WSO2 and Adobe Commerce Exploited in Active Attacks, Added to CISA KEV

#vulnerability #cisa #web-security #software-exploits

Two critical vulnerabilities in WSO2 and Adobe Commerce were actively exploited and added to CISA's KEV catalog, urging immediate patching for affected organizations. The flaws enable remote code execution and unauthorized access, impacting sectors like banking and government.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.

The vulnerabilities are listed below -

CVE-2026-5430 (CVS score: 9.8) - A path traversal vulnerability in WSO2 API Control Plane,

Read original article

*** END OF TRANSMISSION ***

> INK & SWITCH 10TH ANNIVERSARY INTERACTIVE ART AND RESEARCH OVERVIEW > HUMANIST SKILLS CRUCIAL FOR NAVIGATING AI-DRIVEN TECH CHALLENGES > OPENAI SPECIAL PROJECTS 2016: DISCUSSION THREAD > DUTCH GOVERNMENT DEVELOPS CUSTOM OS ALTERNATIVE USING NIXOS FOR NATIONAL INFRASTRUCTURE > EMULATING PENTIUM II 600MHZ WITH VOODOO 3 ON 86BOX VIA M6 MAC MINI > EXPLOITING CVE-2025-13032 IN AVAST ANTIVIRUS KERNEL DRIVER FOR PRIVILEGE ESCALATION > LIGHTSPEED LAUNCHES $250M EARLY-STAGE AI FUND IN INDIA TO FUEL TECH INNOVATION > JEV CODE REVIEWER: AI-POWERED CODE CHANGE CLASSIFICATION AND EXPLANATION TOOL > CLOUDFLARE ADDRESSES CONTAINER SECURITY FLAW ALLOWING CROSS-CUSTOMER DISK DATA ACCESS > CRITICAL VULNERABILITIES IN WSO2 AND ADOBE COMMERCE EXPLOITED IN ACTIVE ATTACKS, ADDED TO CISA KEV> INK & SWITCH 10TH ANNIVERSARY INTERACTIVE ART AND RESEARCH OVERVIEW > HUMANIST SKILLS CRUCIAL FOR NAVIGATING AI-DRIVEN TECH CHALLENGES > OPENAI SPECIAL PROJECTS 2016: DISCUSSION THREAD > DUTCH GOVERNMENT DEVELOPS CUSTOM OS ALTERNATIVE USING NIXOS FOR NATIONAL INFRASTRUCTURE > EMULATING PENTIUM II 600MHZ WITH VOODOO 3 ON 86BOX VIA M6 MAC MINI > EXPLOITING CVE-2025-13032 IN AVAST ANTIVIRUS KERNEL DRIVER FOR PRIVILEGE ESCALATION > LIGHTSPEED LAUNCHES $250M EARLY-STAGE AI FUND IN INDIA TO FUEL TECH INNOVATION > JEV CODE REVIEWER: AI-POWERED CODE CHANGE CLASSIFICATION AND EXPLANATION TOOL > CLOUDFLARE ADDRESSES CONTAINER SECURITY FLAW ALLOWING CROSS-CUSTOMER DISK DATA ACCESS > CRITICAL VULNERABILITIES IN WSO2 AND ADOBE COMMERCE EXPLOITED IN ACTIVE ATTACKS, ADDED TO CISA KEV