SecurityThe Hacker Newsabout 4 hours ago
CISA Adds Exploited WSO2, Adobe Commerce Flaws to KEV
2 min read
CISA added two critical flaws to its Known Exploited Vulnerabilities catalog on Thursday after evidence of active attacks. CVE-2026-5430, a 9.8 path traversal in WSO2 API Manager and related products, and CVE-2026-71362, a 9.1 authorization bug in Adobe Commerce and Magento, are being exploited. Federal agencies must patch by September 27, 2026.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAdobe
