MEIFP – Most Exploited Internet-Facing Products

WSO2

Products: WSO2 API Control Plane · WSO2 API Manager · WSO2 Carbon API Manager Rest API Utility · WSO2 Traffic Manager · WSO2 Universal Gateway

40.6

Score

CVEs

Active

PoC

KEV

#115

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-5430	2026-08-06	10.0v3.1	ACTIVE		Low	None	YES	40.6	WSO2 API Control PlaneWSO2 API ManagerWSO2 Carbon API Manager Rest API UtilityWSO2 Traffic ManagerWSO2 Universal Gateway	The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized access. Successful exploitation of this vuln

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3