Security vulnerabilities in WSO2's enterprise identity and API management platforms, including WSO2 Identity Server, API Manager, and related integration products deployed across financial services and enterprise environments. Combined article + CVE feed for the WSO2 beat.https://0daynews.com/en-ushttps://0daynews.com/articles/2026-09-17-wso2-cve-2026-5430-cvss10-jwt-bypass-exploited/https://0daynews.com/articles/2026-09-17-wso2-cve-2026-5430-cvss10-jwt-bypass-exploited/CVE-2026-5430 lets unauthenticated attackers forge JWTs and gain administrative access to WSO2 deployments. Active exploitation confirmed. Patch immediately.Thu, 17 Sep 2026 15:00:00 GMTWSO2articlehttps://0daynews.com/cve/cve-2022-29464/https://0daynews.com/cve/cve-2022-29464/Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.Thu, 17 Sep 2026 00:00:00 GMTWSO2criticalcve