{"schema":"vulnpedia.poc/1","cve":"CVE-2026-5430","kev":{"since":"2026-09-24","ransomware":false},"epss":{"score":0.2239,"percentile":0.97677},"cvss":{"version":"3.1","score":10,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-5430/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"generated":"2026-10-26T06:59:15.268Z","has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/331d5cf317af","executable":false,"sourceId":"331d5cf317af","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"331d5cf317af","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/xdb/331d5cf317af"}],"repositoryUrl":"https://github.com/abraxas/CVE-2026-5430"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/4af342cce92b","executable":false,"sourceId":"4af342cce92b","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4af342cce92b","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/xdb/4af342cce92b"}],"repositoryUrl":"https://github.com/davidvrns/CVE-2026-5430-WSO2"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/638349da3aad","executable":false,"sourceId":"638349da3aad","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"638349da3aad","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/xdb/638349da3aad"}],"repositoryUrl":"https://github.com/getdrive/wso2_cve-2026-5430_lab"}],"poc_candidates":[{"url":"https://github.com/HORKimhab/CVE-2026-5430","source":"poc-in-github","sourceId":"CVE-2026-5430","description":"CVE-2026-5430 - Draft or TODO","modified":"2026-09-16T05:57:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5430","url":"https://github.com/HORKimhab/CVE-2026-5430"},{"source":"poc-in-github","sourceId":"CVE-2026-5430","modified":"2026-09-16T05:57:04Z","url":"https://github.com/HORKimhab/CVE-2026-5430"}],"tags":[]},{"url":"https://github.com/abraxas/CVE-2026-5430","source":"poc-in-github","sourceId":"CVE-2026-5430","description":"CVE-2026-5430 - WSO2 API Manager - Critical 10.0 - Unauthenticated Account Takeover - WSO2 API Control Plane, WSO2 API Manager, WSO2 Traffic Manager, WSO2 Universal Gateway","modified":"2026-10-19T12:33:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5430","url":"https://github.com/abraxas/CVE-2026-5430"},{"source":"poc-in-github","sourceId":"CVE-2026-5430","modified":"2026-10-19T12:33:50Z","url":"https://github.com/abraxas/CVE-2026-5430"}],"tags":[]},{"url":"https://github.com/davidvrns/CVE-2026-5430-WSO2","source":"poc-in-github","sourceId":"CVE-2026-5430","description":"Detection PoC for CVE-2026-5430 — unauthenticated JWT algorithm bypass (CVSS 10.0) affecting WSO2 API Manager 4.1.0–4.6.0. Read-only assessment tool with patch confirmation and WAF detection. Authorized use only.","modified":"2026-10-23T11:40:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5430","url":"https://github.com/davidvrns/CVE-2026-5430-WSO2"},{"source":"poc-in-github","sourceId":"CVE-2026-5430","modified":"2026-10-23T11:40:17Z","url":"https://github.com/davidvrns/CVE-2026-5430-WSO2"}],"tags":[]},{"url":"https://github.com/getdrive/wso2_cve-2026-5430_lab","source":"poc-in-github","sourceId":"CVE-2026-5430","description":"Уязвимая лаборатория WSO2 API Manager 4.5.0 в Docker, сканер и эксплойт для CVE-2026-5430 (обход аутентификации через поддельный HS256 JWT)","modified":"2026-10-08T22:42:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5430","url":"https://github.com/getdrive/wso2_cve-2026-5430_lab"},{"source":"poc-in-github","sourceId":"CVE-2026-5430","modified":"2026-10-08T22:42:40Z","url":"https://github.com/getdrive/wso2_cve-2026-5430_lab"}],"tags":[]}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-5430%22&type=repositories","executable":false}]}