{"schema":"vulnpedia.research/1","cve":"CVE-2026-5430","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/","tags":["vendor-advisory","Vendor Advisory"],"source":"mitre","sourceId":"WSO2","modified":"2026-08-06T07:33:28.156Z","origins":[{"source":"mitre","sourceId":"WSO2","modified":"2026-08-06T07:33:28.156Z","url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/"},{"source":"nvd","sourceId":"CVE-2026-5430","modified":"2026-09-25T12:53:05.517","url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-5430","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-25T03:55:16.285Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-25T03:55:16.285Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-5430"},{"source":"nvd","sourceId":"CVE-2026-5430","modified":"2026-09-25T12:53:05.517","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-5430"}]},{"source":"euvd","sourceId":"EUVD-2026-53822","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-53822","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-53822","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-53822"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-5430","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://x.com/inkmoro/status/2099925214339727646","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-5430","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","modified":"2026-09-15T00:00:00Z","url":"https://x.com/inkmoro/status/2099925214339727646"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-5430","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","modified":"2026-09-15T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://asec.ahnlab.com/en/95741/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-5430","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","modified":"2026-09-15T00:00:00Z","url":"https://asec.ahnlab.com/en/95741/"}]},{"url":"https://vulncheck.com/xdb/331d5cf317af","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"331d5cf317af","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"331d5cf317af","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/xdb/331d5cf317af"}]},{"url":"https://github.com/abraxas/CVE-2026-5430","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"331d5cf317af","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"331d5cf317af","modified":"2026-09-15T00:00:00Z","url":"https://github.com/abraxas/CVE-2026-5430"}]},{"url":"https://vulncheck.com/xdb/4af342cce92b","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"4af342cce92b","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4af342cce92b","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/xdb/4af342cce92b"}]},{"url":"https://github.com/davidvrns/CVE-2026-5430-WSO2","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"4af342cce92b","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4af342cce92b","modified":"2026-09-15T00:00:00Z","url":"https://github.com/davidvrns/CVE-2026-5430-WSO2"}]},{"url":"https://vulncheck.com/xdb/638349da3aad","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"638349da3aad","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"638349da3aad","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/xdb/638349da3aad"}]},{"url":"https://github.com/getdrive/wso2_cve-2026-5430_lab","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"638349da3aad","modified":"2026-09-15T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"638349da3aad","modified":"2026-09-15T00:00:00Z","url":"https://github.com/getdrive/wso2_cve-2026-5430_lab"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/HORKimhab/CVE-2026-5430","source":"poc-in-github","sourceId":"CVE-2026-5430","description":"CVE-2026-5430 - Draft or TODO","modified":"2026-09-16T05:57:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5430","url":"https://github.com/HORKimhab/CVE-2026-5430"},{"source":"poc-in-github","sourceId":"CVE-2026-5430","modified":"2026-09-16T05:57:04Z","url":"https://github.com/HORKimhab/CVE-2026-5430"}],"tags":[]},{"url":"https://github.com/abraxas/CVE-2026-5430","source":"poc-in-github","sourceId":"CVE-2026-5430","description":"CVE-2026-5430 - WSO2 API Manager - Critical 10.0 - Unauthenticated Account Takeover - WSO2 API Control Plane, WSO2 API Manager, WSO2 Traffic Manager, WSO2 Universal Gateway","modified":"2026-10-19T12:33:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5430","url":"https://github.com/abraxas/CVE-2026-5430"},{"source":"poc-in-github","sourceId":"CVE-2026-5430","modified":"2026-10-19T12:33:50Z","url":"https://github.com/abraxas/CVE-2026-5430"}],"tags":[]},{"url":"https://github.com/davidvrns/CVE-2026-5430-WSO2","source":"poc-in-github","sourceId":"CVE-2026-5430","description":"Detection PoC for CVE-2026-5430 — unauthenticated JWT algorithm bypass (CVSS 10.0) affecting WSO2 API Manager 4.1.0–4.6.0. Read-only assessment tool with patch confirmation and WAF detection. Authorized use only.","modified":"2026-10-23T11:40:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5430","url":"https://github.com/davidvrns/CVE-2026-5430-WSO2"},{"source":"poc-in-github","sourceId":"CVE-2026-5430","modified":"2026-10-23T11:40:17Z","url":"https://github.com/davidvrns/CVE-2026-5430-WSO2"}],"tags":[]},{"url":"https://github.com/getdrive/wso2_cve-2026-5430_lab","source":"poc-in-github","sourceId":"CVE-2026-5430","description":"Уязвимая лаборатория WSO2 API Manager 4.5.0 в Docker, сканер и эксплойт для CVE-2026-5430 (обход аутентификации через поддельный HS256 JWT)","modified":"2026-10-08T22:42:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-5430","url":"https://github.com/getdrive/wso2_cve-2026-5430_lab"},{"source":"poc-in-github","sourceId":"CVE-2026-5430","modified":"2026-10-08T22:42:40Z","url":"https://github.com/getdrive/wso2_cve-2026-5430_lab"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"331d5cf317af","url":"https://vulncheck.com/xdb/331d5cf317af","cve":"CVE-2026-5430","dateAdded":"2026-09-28T09:46:13Z","modified":"2026-09-15T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/abraxas/CVE-2026-5430","observations":[{"dateAdded":"2026-09-28T09:46:13Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"331d5cf317af","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/xdb/331d5cf317af"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"4af342cce92b","url":"https://vulncheck.com/xdb/4af342cce92b","cve":"CVE-2026-5430","dateAdded":"2026-10-08T03:00:33Z","modified":"2026-09-15T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/davidvrns/CVE-2026-5430-WSO2","observations":[{"dateAdded":"2026-10-08T03:00:33Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"4af342cce92b","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/xdb/4af342cce92b"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"638349da3aad","url":"https://vulncheck.com/xdb/638349da3aad","cve":"CVE-2026-5430","dateAdded":"2026-10-08T15:09:59Z","modified":"2026-09-15T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/getdrive/wso2_cve-2026-5430_lab","observations":[{"dateAdded":"2026-10-08T15:09:59Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"638349da3aad","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/xdb/638349da3aad"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-09-15T00:00:00Z","modified":"2026-09-15T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"WSO2","product":"Multiple Products","dueDate":"2026-09-27T00:00:00Z","cisaDateAdded":"2026-09-24T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","modified":"2026-09-15T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","catalog":"VulnCheck KEV","kind":"report","url":"https://x.com/inkmoro/status/2099925214339727646","dateAdded":"2026-09-15T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","url":"https://x.com/inkmoro/status/2099925214339727646"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-09-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","catalog":"VulnCheck KEV","kind":"report","url":"https://asec.ahnlab.com/en/95741/","dateAdded":"2026-10-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-5430","url":"https://asec.ahnlab.com/en/95741/"}]}]}