#Hacktron

Hackers Are Forging Admin Tokens to Take Over WSO2 API Manager

A critical signature-verification bug tracked as CVE-2026-5430 lets attackers forge login tokens and seize administrator accounts. Exploitation is already under way.