CVE-2026-5430

Vendor

WSO2

Product

Multiple Products

CVSS

10.0

EPSS

1.00 (p100)

CISA KEV

added 24 Sep 2026, due 27 Sep 2026 (35d overdue)

Weakness

CWE-347

Exposure class

Identity, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 87
   KEV NVD 6 Aug 2026

   WSO2 Multiple Products Path Traversal Vulnerability

   WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.

   KEV · due 27 Sep 2026 (overdue) CVSS 10.0 Fix available CVE-2026-5430 WSO2
2. 59
   CISA alert CISA 24 Sep 2026

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability CVE-2026-71362 Adobe…

   Exploited CVE-2026-5430CVE-2026-71362 Adobe
3. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more