CISA flags active exploitation of WSO2, SharePoint, Adobe Commerce flaws

CISA added CVE-2026-5430, a critical WSO2 authentication bypass, to its Known Exploited Vulnerabilities catalog, alongside SharePoint and Adobe Commerce flaws, confirming active exploitation. The WSO2 vulnerability affects multiple enterprise products, posing a significant risk to organizations using them. The advisory signals a heightened threat landscape for enterprise software, though specific attack scope and victim impact remain undisclosed.