CVE-2026-5430
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, whi...
Affects 4 products across 1 vendor.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A critical severity vulnerability (CVE-2026-5430) affects the target system. The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthor...
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2026-5430?
What is the CVSS score for CVE-2026-5430?
Is CVE-2026-5430 actively exploited?
How do I remediate CVE-2026-5430?
What systems are affected by CVE-2026-5430?
| CVE ID | CVE-2026-5430 |
|---|---|
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| Published | 2026-08-06 |
| Last Modified | 2026-09-25 |
| ICS Relevance | 0% |
| Weakness (CWE) | |
| Source | NVD |
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized access. Successful exploitation of this vulnerability may result in unauthorized access to the system, including the potential compromise of administrative accounts and full account takeover. The CVSS score is adjusted to 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) in single-tenant deployments, reflecting that the impact is contained within a single security authority boundary.
Source: NIST NVD / MITRE CVE Database
| Vendor | Product | Affected Versions |
|---|---|---|
| Wso2 | Api Manager | ≥ 4.1.0, < 4.1.0.257 ≥ 4.2.0, < 4.2.0.197 ≥ 4.3.0, < 4.3.0.108 ≥ 4.4.0, < 4.4.0.72 ≥ 4.5.0, < 4.5.0.57 ≥ 4.6.0, < 4.6.0.21 |
| Wso2 | Api Control Plane | ≥ 4.5.0, < 4.5.0.58 ≥ 4.6.0, < 4.6.0.22 |
| Wso2 | Traffic Manager | ≥ 4.5.0, < 4.5.0.56 ≥ 4.6.0, < 4.6.0.21 |
| Wso2 | Universal Gateway | ≥ 4.5.0, < 4.5.0.57 ≥ 4.6.0, < 4.6.0.21 |
| CISA known-exploited | ● Active Exploitation Confirmed (added 2026-09-24) |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
This Vulnerability Is Being Actively Exploited
CVE-2026-5430 is on the CISA known-exploited list - confirmed active exploitation in the wild. BreachSpider flags known-exploited CVEs on the ICS assets they affect, with known-exploited status synced daily from CISA.
Create a free account →