HIGHVulnerability
Verified
Global

CISA KEV: WSO2 Multiple Products — WSO2 Multiple Products Path Traversal Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.

Analysis

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-24. Remediation due: 2026-09-27.

Indicators of Compromise (1)

CVE (1)
CVE-2026-5430
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 24, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

CaixaBank establishes new AI and data division

Spanish financial services firm CaixaBank has created its first AI and data division in a move designed to accelerate the bank's digital transformation efforts.

Finextra
MEDIUMVulnerability

Microsoft: Windows KB5124010 update crashes some games and apps

Microsoft confirmed over the weekend that some games and applications using AC-3 (Dolby Digital) audio decoding will crash after installing the September 2026 KB5124010 Windows 11 preview update. [...]

BleepingComputer
MEDIUMVulnerability

More UK Schools Are Recovering Faster from Cyber Incidents

Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks

Infosecurity Magazine