[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzjCySjcxJ5hQ1OoG39EvcmLjT5gFSM0pYOQb_JyFF4I":3},{"article":4,"iocs":49,"watch_terms":63,"solutions":64,"lesson":155},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"8f483e44-d690-407c-814b-10a6514866c5","CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks","cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks-2e9b76","The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2. [...]","CISA has added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to patch them by specific deadlines. The most critical flaws include an authentication bypass in WSO2 API Manager (CVE-2026-5430) and an incorrect authorization flaw in Adobe Commerce (CVE-2026-71362). Additionally, a code injection vulnerability in Microsoft SharePoint (CVE-2026-65660) and a pre-authentication bypass in Mikrotik RouterOS (CVE-2026-67279) are also being exploited.","CISA warns of actively exploited vulnerabilities in WSO2, Adobe Commerce, SharePoint, and Mikrotik.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F07\u002F22\u002FCISA.jpg","2026-09-25T17:24:20+00:00","2026-09-25T20:00:36.826933+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"WSO2 API Manager","product",{"name":21,"type":22},"WSO2","vendor",{"name":24,"type":19},"Adobe Commerce",{"name":26,"type":22},"Adobe",{"name":28,"type":19},"Microsoft SharePoint",{"name":30,"type":22},"Microsoft","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54,57,60],{"type":51,"value":52,"context":53},"cve","CVE-2026-5430","Critical authentication bypass in WSO2 API Manager",{"type":51,"value":55,"context":56},"CVE-2026-71362","Critical incorrect authorization in Adobe Commerce",{"type":51,"value":58,"context":59},"CVE-2026-65660","High-severity code injection in Microsoft SharePoint",{"type":51,"value":61,"context":62},"CVE-2026-67279","Medium-severity pre-authentication SSH state-machine\u002Fworkflow bypass in Mikrotik RouterOS",[26,30,21],{"controls":65,"vendors":151},[66,95,123],{"slug":67,"name":68,"problem":69,"products":70},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[71,79,87],{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":96,"name":97,"problem":98,"products":99},"patch-management","Automated patch management","Known holes get closed in days, not months.",[100,108,115],{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":109,"vendor_name":30,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":48,"name":124,"problem":125,"products":126},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[127,135,143],{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":136,"vendor_name":137,"vendor_logo":138,"product_slug":139,"product_name":140,"url":141,"description":142},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":144,"vendor_name":145,"vendor_logo":146,"product_slug":147,"product_name":148,"url":149,"description":150},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",[152],{"slug":109,"name":30,"logo_path":110,"roles":153},[154],"affected",{"slug":156,"title":157,"body":158,"framework_refs":159,"framework_notes":171},"cisa-flags-four-actively-exploited-flaws-in-sharepoint-wso2-adobe-commerce-mikrotik","CISA Flags Four Actively Exploited Flaws in SharePoint, WSO2, Adobe Commerce & MikroTik","Four serious vulnerabilities across widely-used enterprise platforms — including authentication bypasses, authorization flaws, and code injection — are being actively exploited in the wild, prompting CISA to add them to its Known Exploited Vulnerabilities catalog. The root cause pattern here is delayed or absent patch application on internet-facing and critical infrastructure systems, leaving known weaknesses open for attackers to abuse. Authentication bypass and incorrect authorization flaws are particularly dangerous because they can allow unauthenticated attackers to gain privileged access without needing stolen credentials. Federal agencies have been given hard deadlines to remediate, but private sector organizations face the same risk and should treat CISA KEV listings as urgent signals requiring immediate action.",[160,161,162,163,164,165,166,167,168,169,170],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","NIST AC-3: Access Enforcement","NIST SC-7: Boundary Protection","CISA Binding Operational Directive 22-01: Known Exploited Vulnerabilities Catalog","ISO\u002FIEC 27001:2022 Annex A.8.8: Management of Technical Vulnerabilities","ITIL 4: Change Enablement \u002F Emergency Change Process",{}]