CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

T1Critical 100Covered by 1 source · first reported by BleepingComputer at 25 Sept, 17:24 UTC

The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2. [...]

security

Sources

T1CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacksBleepingComputer25 Sept, 17:24

Vulnerabilities

CVE-2026-5430

Why this score

Signals contributing to the severity score
Signal	Points
kev added	50
kev short fuse — 3 days to remediate	15
ssvc active	35
cvss critical — 10	20
public poc — 1 repositories	20
widely deployed	15