Critical WSO2 API Manager Vulnerability Actively Exploited

Security researchers have issued a warning regarding active exploitation of a critical vulnerability, CVE-2026-5430, in WSO2 API Manager. The flaw, involving improper cryptographic signature verification, could enable account takeovers by bypassing JWT authentication. Enterprises using the software are urged to take immediate action to mitigate potential risks.