{"id":3152,"date":"2026-09-25T08:22:20","date_gmt":"2026-09-25T08:22:20","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3152"},"modified":"2026-09-25T08:22:20","modified_gmt":"2026-09-25T08:22:20","slug":"wso2-and-adobe-commerce-flaws-exploited-in-attacks-added-to-cisa-kev","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3152","title":{"rendered":"WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV"},"content":{"rendered":"<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">Sep 25, 2026<\/span><\/span><span class=\"p-tags\">Vulnerability \/ Web Security<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgqTAzyCx7Cezy4z5oRz-uAHvdvW1IZDrQlfIqT_ZDJ22Hvarb4lmYWkjqBDI_CngiSy2wuot68b2CgMS_0CWVZS93lYo5wqJsd5-WdFQgO3dieodXpVQiizcFjQsPzUOlVrs32zkBaHAwOyD7S4GCZ3b1d-Jyt4-ZTaMltfU0jG5dwBw5cxj880D4Cx8W0\/s1700-nu-rw-lo-l85-e365\/ADOBE-CISA.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><\/a><\/div>\n<p>The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, <a href=\"https:\/\/www.cisa.gov\/news-events\/alerts\/2026\/09\/24\/cisa-adds-two-known-exploited-vulnerabilities-catalog\" target=\"_blank\">added<\/a> two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (<a href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog\" target=\"_blank\">KEV<\/a>) catalog, based on evidence of active exploitation.<\/p>\n<p>The vulnerabilities are listed below &#8211;<\/p>\n<ul>\n<li><strong>CVE-2026-5430<\/strong> (CVS score: 9.8) &#8211; A path traversal vulnerability in  WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway that could allow unrestricted file upload and lead to remote code execution.<\/li>\n<li><strong>CVE-2026-71362<\/strong> (CVSS score: 9.1) &#8211; An incorrect authorization vulnerability in  Adobe Commerce and Magento that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.<\/li>\n<\/ul>\n<p>The addition of CVE-2026-5430 to the KEV comes a little over a week after watchTowr said it&#8217;s seeing in-the-wild exploitation efforts against its honeypots since at least September 13, 2026.<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/event-security-need\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhJkE4t8oCql1wmWVt687J1yD7WnYRqvIpcsUwFSVUO-0HpxZWMCxLmeYwBlz38-C0KD-R6f9Pg0swgPTQuBsNXck_Kl3iKWNSQtyMcDNUSZGhiBd_XFu6U1SQi5LhuW-FHg00iT3CbRCUgMoCwhZevwxp8-9gwM2wZVVtGVO8Z2NbZ5EjVmI2dH4adnSAk\/s728-nu-rw-lo-l85-e365\/Shai-Hulud-d.jpg\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>As for <a href=\"https:\/\/github.com\/dinosn\/cve-2026-71362-magento-lab\" target=\"_blank\">CVE-2026-71362<\/a>, Sansec noted in August 2026 that it had detected and blocked exploitation attempts aimed at the flaw.<\/p>\n<p>\u00abThe vulnerability lets attackers switch a customer session to another customer account,\u00bb the Dutch e-commerce security company <a href=\"https:\/\/sansec.io\/research\/adobe-commerce-account-takeover-apsb26-92\" target=\"_blank\">said<\/a>. \u00abThis gives them access to the victim&#8217;s account and private customer data.\u00bb<\/p>\n<p>Previdian&#8217;s telemetry <a href=\"https:\/\/previdian.com\/CVE-2026-71362#telemetry\" target=\"_blank\">indicates<\/a> that a lone IP address from Australia attempted to exploit the flaw targeting its honeypot sensors on September 10, 2026. Adobe has yet to update its advisory to confirm exploitation status. <\/p>\n<p>Federal Civilian Executive Branch (FCEB) agencies are advised to apply fixes for both vulnerabilities by September 27, 2026, to safeguard their networks against active threats.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ue804Ravie Lakshmanan\ue802Sep 25, 2026Vulnerability \/ Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to&hellip;<\/p>\n","protected":false},"author":1,"featured_media":3153,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[498,1135,24,62,3011,128,11,203,3424],"class_list":["post-3152","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-added","tag-adobe","tag-attacks","tag-cisa","tag-commerce","tag-exploited","tag-flaws","tag-kev","tag-wso2"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3152","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3152"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3152\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/3153"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3152"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3152"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3152"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}