CISA adds WSO2 CVE-2026-5430 and Adobe Commerce/Magento CVE-2026-71362 to KEV catalog over active exploitation
CISA added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: CVE-2026-5430, a path traversal flaw in multiple WSO2 products, and CVE-2026-71362, an incorrect authorization flaw in Adobe Commerce and Magento. CISA describes these vulnerability types as a frequent attack vecto…