cybercrime.clubhttps://cybercrime.club/tags/api-gateway/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usWed, 16 Sep 2026 11:07:56 -0400CVE-2026-5430: Active Exploitation of WSO2 API Manager JWT Bypass Delivers Forged Admin Tokenshttps://cybercrime.club/posts/wso2-api-manager-cve-2026-5430-jwt-algorithm-bypass-active-exploitation/Wed, 16 Sep 2026 11:07:56 -0400https://cybercrime.club/posts/wso2-api-manager-cve-2026-5430-jwt-algorithm-bypass-active-exploitation/Attackers are actively exploiting CVE-2026-5430 (CVSS 9.8), a JWT signature-verification flaw in WSO2 API Manager and its Universal Gateway, to forge tokens carrying administrator privileges — watchTowr's honeypots caught the first forged-admin-token traffic on September 13.vulnerabilities