CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-5430

The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized access. Successful exploitation of this vulnerability may result in unauthorized access to the system, including the potential compromise of administrative accounts and full account takeover. The CVSS score is adjusted to 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) in single-tenant deployments, reflecting that the impact is contained within a single security authority boundary.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 12.7%

CVSS Severity

CVSS v3 Score 10.0

References

https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/

Products affected by CVE-2026-5430

Wso2 » Api Control Plane » Version: 4.5.0

cpe:2.3:a:wso2:api_control_plane:4.5.0
Wso2 » Api Control Plane » Version: 4.5.0.10

cpe:2.3:a:wso2:api_control_plane:4.5.0.10
Wso2 » Api Control Plane » Version: 4.5.0.18

cpe:2.3:a:wso2:api_control_plane:4.5.0.18
Wso2 » Api Control Plane » Version: 4.5.0.21

cpe:2.3:a:wso2:api_control_plane:4.5.0.21
Wso2 » Api Control Plane » Version: 4.5.0.29

cpe:2.3:a:wso2:api_control_plane:4.5.0.29
Wso2 » Api Control Plane » Version: 4.5.0.39

cpe:2.3:a:wso2:api_control_plane:4.5.0.39
Wso2 » Api Control Plane » Version: 4.5.0.44

cpe:2.3:a:wso2:api_control_plane:4.5.0.44
Wso2 » Api Control Plane » Version: 4.5.0.45

cpe:2.3:a:wso2:api_control_plane:4.5.0.45
Wso2 » Api Control Plane » Version: 4.5.0.49

cpe:2.3:a:wso2:api_control_plane:4.5.0.49
Wso2 » Api Control Plane » Version: 4.5.0.50

cpe:2.3:a:wso2:api_control_plane:4.5.0.50
Wso2 » Api Control Plane » Version: 4.5.0.55

cpe:2.3:a:wso2:api_control_plane:4.5.0.55
Wso2 » Api Control Plane » Version: 4.5.0.56

cpe:2.3:a:wso2:api_control_plane:4.5.0.56
Wso2 » Api Control Plane » Version: 4.6.0

cpe:2.3:a:wso2:api_control_plane:4.6.0
Wso2 » Api Control Plane » Version: 4.6.0.13

cpe:2.3:a:wso2:api_control_plane:4.6.0.13
Wso2 » Api Control Plane » Version: 4.6.0.14

cpe:2.3:a:wso2:api_control_plane:4.6.0.14
Wso2 » Api Control Plane » Version: 4.6.0.19

cpe:2.3:a:wso2:api_control_plane:4.6.0.19
Wso2 » Api Control Plane » Version: 4.6.0.20

cpe:2.3:a:wso2:api_control_plane:4.6.0.20
Wso2 » Api Control Plane » Version: 4.6.0.3

cpe:2.3:a:wso2:api_control_plane:4.6.0.3
Wso2 » Api Control Plane » Version: 4.6.0.8

cpe:2.3:a:wso2:api_control_plane:4.6.0.8
Wso2 » Api Control Plane » Version: 4.6.0.9

cpe:2.3:a:wso2:api_control_plane:4.6.0.9
Wso2 » Api Manager » Version: 4.1.0

cpe:2.3:a:wso2:api_manager:4.1.0
Wso2 » Api Manager » Version: 4.1.0.136

cpe:2.3:a:wso2:api_manager:4.1.0.136
Wso2 » Api Manager » Version: 4.1.0.152

cpe:2.3:a:wso2:api_manager:4.1.0.152
Wso2 » Api Manager » Version: 4.1.0.166

cpe:2.3:a:wso2:api_manager:4.1.0.166
Wso2 » Api Manager » Version: 4.1.0.169

cpe:2.3:a:wso2:api_manager:4.1.0.169
Wso2 » Api Manager » Version: 4.1.0.171

cpe:2.3:a:wso2:api_manager:4.1.0.171
Wso2 » Api Manager » Version: 4.1.0.187

cpe:2.3:a:wso2:api_manager:4.1.0.187
Wso2 » Api Manager » Version: 4.1.0.200

cpe:2.3:a:wso2:api_manager:4.1.0.200
Wso2 » Api Manager » Version: 4.1.0.206

cpe:2.3:a:wso2:api_manager:4.1.0.206
Wso2 » Api Manager » Version: 4.1.0.215

cpe:2.3:a:wso2:api_manager:4.1.0.215
Wso2 » Api Manager » Version: 4.1.0.216

cpe:2.3:a:wso2:api_manager:4.1.0.216
Wso2 » Api Manager » Version: 4.1.0.218

cpe:2.3:a:wso2:api_manager:4.1.0.218
Wso2 » Api Manager » Version: 4.1.0.219

cpe:2.3:a:wso2:api_manager:4.1.0.219
Wso2 » Api Manager » Version: 4.1.0.228

cpe:2.3:a:wso2:api_manager:4.1.0.228
Wso2 » Api Manager » Version: 4.1.0.231

cpe:2.3:a:wso2:api_manager:4.1.0.231
Wso2 » Api Manager » Version: 4.1.0.233

cpe:2.3:a:wso2:api_manager:4.1.0.233
Wso2 » Api Manager » Version: 4.1.0.236

cpe:2.3:a:wso2:api_manager:4.1.0.236
Wso2 » Api Manager » Version: 4.1.0.238

cpe:2.3:a:wso2:api_manager:4.1.0.238
Wso2 » Api Manager » Version: 4.1.0.239

cpe:2.3:a:wso2:api_manager:4.1.0.239
Wso2 » Api Manager » Version: 4.1.0.242

cpe:2.3:a:wso2:api_manager:4.1.0.242
Wso2 » Api Manager » Version: 4.1.0.243

cpe:2.3:a:wso2:api_manager:4.1.0.243
Wso2 » Api Manager » Version: 4.1.0.244

cpe:2.3:a:wso2:api_manager:4.1.0.244
Wso2 » Api Manager » Version: 4.1.0.248

cpe:2.3:a:wso2:api_manager:4.1.0.248
Wso2 » Api Manager » Version: 4.1.0.249

cpe:2.3:a:wso2:api_manager:4.1.0.249
Wso2 » Api Manager » Version: 4.1.0.254

cpe:2.3:a:wso2:api_manager:4.1.0.254
Wso2 » Api Manager » Version: 4.1.0.255

cpe:2.3:a:wso2:api_manager:4.1.0.255
Wso2 » Api Manager » Version: 4.2.0

cpe:2.3:a:wso2:api_manager:4.2.0
Wso2 » Api Manager » Version: 4.2.0.100

cpe:2.3:a:wso2:api_manager:4.2.0.100
Wso2 » Api Manager » Version: 4.2.0.108

cpe:2.3:a:wso2:api_manager:4.2.0.108
Wso2 » Api Manager » Version: 4.2.0.127

cpe:2.3:a:wso2:api_manager:4.2.0.127
Wso2 » Api Manager » Version: 4.2.0.138

cpe:2.3:a:wso2:api_manager:4.2.0.138
Wso2 » Api Manager » Version: 4.2.0.144

cpe:2.3:a:wso2:api_manager:4.2.0.144
Wso2 » Api Manager » Version: 4.2.0.150

cpe:2.3:a:wso2:api_manager:4.2.0.150
Wso2 » Api Manager » Version: 4.2.0.153

cpe:2.3:a:wso2:api_manager:4.2.0.153
Wso2 » Api Manager » Version: 4.2.0.156

cpe:2.3:a:wso2:api_manager:4.2.0.156
Wso2 » Api Manager » Version: 4.2.0.157

cpe:2.3:a:wso2:api_manager:4.2.0.157
Wso2 » Api Manager » Version: 4.2.0.164

cpe:2.3:a:wso2:api_manager:4.2.0.164
Wso2 » Api Manager » Version: 4.2.0.169

cpe:2.3:a:wso2:api_manager:4.2.0.169
Wso2 » Api Manager » Version: 4.2.0.171

cpe:2.3:a:wso2:api_manager:4.2.0.171
Wso2 » Api Manager » Version: 4.2.0.173

cpe:2.3:a:wso2:api_manager:4.2.0.173
Wso2 » Api Manager » Version: 4.2.0.176

cpe:2.3:a:wso2:api_manager:4.2.0.176
Wso2 » Api Manager » Version: 4.2.0.178

cpe:2.3:a:wso2:api_manager:4.2.0.178
Wso2 » Api Manager » Version: 4.2.0.179

cpe:2.3:a:wso2:api_manager:4.2.0.179
Wso2 » Api Manager » Version: 4.2.0.182

cpe:2.3:a:wso2:api_manager:4.2.0.182
Wso2 » Api Manager » Version: 4.2.0.183

cpe:2.3:a:wso2:api_manager:4.2.0.183
Wso2 » Api Manager » Version: 4.2.0.184

cpe:2.3:a:wso2:api_manager:4.2.0.184
Wso2 » Api Manager » Version: 4.2.0.188

cpe:2.3:a:wso2:api_manager:4.2.0.188
Wso2 » Api Manager » Version: 4.2.0.189

cpe:2.3:a:wso2:api_manager:4.2.0.189
Wso2 » Api Manager » Version: 4.2.0.194

cpe:2.3:a:wso2:api_manager:4.2.0.194
Wso2 » Api Manager » Version: 4.2.0.195

cpe:2.3:a:wso2:api_manager:4.2.0.195
Wso2 » Api Manager » Version: 4.2.0.80

cpe:2.3:a:wso2:api_manager:4.2.0.80
Wso2 » Api Manager » Version: 4.3.0

cpe:2.3:a:wso2:api_manager:4.3.0
Wso2 » Api Manager » Version: 4.3.0.100

cpe:2.3:a:wso2:api_manager:4.3.0.100
Wso2 » Api Manager » Version: 4.3.0.105

cpe:2.3:a:wso2:api_manager:4.3.0.105
Wso2 » Api Manager » Version: 4.3.0.106

cpe:2.3:a:wso2:api_manager:4.3.0.106
Wso2 » Api Manager » Version: 4.3.0.16

cpe:2.3:a:wso2:api_manager:4.3.0.16
Wso2 » Api Manager » Version: 4.3.0.39

cpe:2.3:a:wso2:api_manager:4.3.0.39
Wso2 » Api Manager » Version: 4.3.0.51

cpe:2.3:a:wso2:api_manager:4.3.0.51
Wso2 » Api Manager » Version: 4.3.0.55

cpe:2.3:a:wso2:api_manager:4.3.0.55
Wso2 » Api Manager » Version: 4.3.0.57

cpe:2.3:a:wso2:api_manager:4.3.0.57
Wso2 » Api Manager » Version: 4.3.0.65

cpe:2.3:a:wso2:api_manager:4.3.0.65
Wso2 » Api Manager » Version: 4.3.0.66

cpe:2.3:a:wso2:api_manager:4.3.0.66
Wso2 » Api Manager » Version: 4.3.0.67

cpe:2.3:a:wso2:api_manager:4.3.0.67
Wso2 » Api Manager » Version: 4.3.0.70

cpe:2.3:a:wso2:api_manager:4.3.0.70
Wso2 » Api Manager » Version: 4.3.0.74

cpe:2.3:a:wso2:api_manager:4.3.0.74
Wso2 » Api Manager » Version: 4.3.0.81

cpe:2.3:a:wso2:api_manager:4.3.0.81
Wso2 » Api Manager » Version: 4.3.0.83

cpe:2.3:a:wso2:api_manager:4.3.0.83
Wso2 » Api Manager » Version: 4.3.0.85

cpe:2.3:a:wso2:api_manager:4.3.0.85
Wso2 » Api Manager » Version: 4.3.0.88

cpe:2.3:a:wso2:api_manager:4.3.0.88
Wso2 » Api Manager » Version: 4.3.0.90

cpe:2.3:a:wso2:api_manager:4.3.0.90
Wso2 » Api Manager » Version: 4.3.0.91

cpe:2.3:a:wso2:api_manager:4.3.0.91
Wso2 » Api Manager » Version: 4.3.0.93

cpe:2.3:a:wso2:api_manager:4.3.0.93
Wso2 » Api Manager » Version: 4.3.0.94

cpe:2.3:a:wso2:api_manager:4.3.0.94
Wso2 » Api Manager » Version: 4.3.0.95

cpe:2.3:a:wso2:api_manager:4.3.0.95
Wso2 » Api Manager » Version: 4.3.0.99

cpe:2.3:a:wso2:api_manager:4.3.0.99
Wso2 » Api Manager » Version: 4.4.0

cpe:2.3:a:wso2:api_manager:4.4.0
Wso2 » Api Manager » Version: 4.4.0.28

cpe:2.3:a:wso2:api_manager:4.4.0.28
Wso2 » Api Manager » Version: 4.4.0.29

cpe:2.3:a:wso2:api_manager:4.4.0.29
Wso2 » Api Manager » Version: 4.4.0.30

cpe:2.3:a:wso2:api_manager:4.4.0.30
Wso2 » Api Manager » Version: 4.4.0.33

cpe:2.3:a:wso2:api_manager:4.4.0.33
Wso2 » Api Manager » Version: 4.4.0.38

cpe:2.3:a:wso2:api_manager:4.4.0.38
Wso2 » Api Manager » Version: 4.4.0.45

cpe:2.3:a:wso2:api_manager:4.4.0.45
Wso2 » Api Manager » Version: 4.4.0.47

cpe:2.3:a:wso2:api_manager:4.4.0.47
Wso2 » Api Manager » Version: 4.4.0.49

cpe:2.3:a:wso2:api_manager:4.4.0.49
Wso2 » Api Manager » Version: 4.4.0.52

cpe:2.3:a:wso2:api_manager:4.4.0.52
Wso2 » Api Manager » Version: 4.4.0.54

cpe:2.3:a:wso2:api_manager:4.4.0.54
Wso2 » Api Manager » Version: 4.4.0.55

cpe:2.3:a:wso2:api_manager:4.4.0.55
Wso2 » Api Manager » Version: 4.4.0.57

cpe:2.3:a:wso2:api_manager:4.4.0.57
Wso2 » Api Manager » Version: 4.4.0.58

cpe:2.3:a:wso2:api_manager:4.4.0.58
Wso2 » Api Manager » Version: 4.4.0.59

cpe:2.3:a:wso2:api_manager:4.4.0.59
Wso2 » Api Manager » Version: 4.4.0.63

cpe:2.3:a:wso2:api_manager:4.4.0.63
Wso2 » Api Manager » Version: 4.4.0.64

cpe:2.3:a:wso2:api_manager:4.4.0.64
Wso2 » Api Manager » Version: 4.4.0.69

cpe:2.3:a:wso2:api_manager:4.4.0.69
Wso2 » Api Manager » Version: 4.4.0.70

cpe:2.3:a:wso2:api_manager:4.4.0.70
Wso2 » Api Manager » Version: 4.5.0

cpe:2.3:a:wso2:api_manager:4.5.0
Wso2 » Api Manager » Version: 4.5.0.11

cpe:2.3:a:wso2:api_manager:4.5.0.11
Wso2 » Api Manager » Version: 4.5.0.12

cpe:2.3:a:wso2:api_manager:4.5.0.12
Wso2 » Api Manager » Version: 4.5.0.14

cpe:2.3:a:wso2:api_manager:4.5.0.14
Wso2 » Api Manager » Version: 4.5.0.17

cpe:2.3:a:wso2:api_manager:4.5.0.17
Wso2 » Api Manager » Version: 4.5.0.20

cpe:2.3:a:wso2:api_manager:4.5.0.20
Wso2 » Api Manager » Version: 4.5.0.28

cpe:2.3:a:wso2:api_manager:4.5.0.28
Wso2 » Api Manager » Version: 4.5.0.30

cpe:2.3:a:wso2:api_manager:4.5.0.30
Wso2 » Api Manager » Version: 4.5.0.32

cpe:2.3:a:wso2:api_manager:4.5.0.32
Wso2 » Api Manager » Version: 4.5.0.35

cpe:2.3:a:wso2:api_manager:4.5.0.35
Wso2 » Api Manager » Version: 4.5.0.37

cpe:2.3:a:wso2:api_manager:4.5.0.37
Wso2 » Api Manager » Version: 4.5.0.38

cpe:2.3:a:wso2:api_manager:4.5.0.38
Wso2 » Api Manager » Version: 4.5.0.41

cpe:2.3:a:wso2:api_manager:4.5.0.41
Wso2 » Api Manager » Version: 4.5.0.43

cpe:2.3:a:wso2:api_manager:4.5.0.43
Wso2 » Api Manager » Version: 4.5.0.44

cpe:2.3:a:wso2:api_manager:4.5.0.44
Wso2 » Api Manager » Version: 4.5.0.48

cpe:2.3:a:wso2:api_manager:4.5.0.48
Wso2 » Api Manager » Version: 4.5.0.49

cpe:2.3:a:wso2:api_manager:4.5.0.49
Wso2 » Api Manager » Version: 4.5.0.54

cpe:2.3:a:wso2:api_manager:4.5.0.54
Wso2 » Api Manager » Version: 4.5.0.55

cpe:2.3:a:wso2:api_manager:4.5.0.55
Wso2 » Api Manager » Version: 4.5.0.9

cpe:2.3:a:wso2:api_manager:4.5.0.9
Wso2 » Api Manager » Version: 4.6.0

cpe:2.3:a:wso2:api_manager:4.6.0
Wso2 » Api Manager » Version: 4.6.0.1

cpe:2.3:a:wso2:api_manager:4.6.0.1
Wso2 » Api Manager » Version: 4.6.0.12

cpe:2.3:a:wso2:api_manager:4.6.0.12
Wso2 » Api Manager » Version: 4.6.0.13

cpe:2.3:a:wso2:api_manager:4.6.0.13
Wso2 » Api Manager » Version: 4.6.0.18

cpe:2.3:a:wso2:api_manager:4.6.0.18
Wso2 » Api Manager » Version: 4.6.0.19

cpe:2.3:a:wso2:api_manager:4.6.0.19
Wso2 » Api Manager » Version: 4.6.0.2

cpe:2.3:a:wso2:api_manager:4.6.0.2
Wso2 » Api Manager » Version: 4.6.0.3

cpe:2.3:a:wso2:api_manager:4.6.0.3
Wso2 » Api Manager » Version: 4.6.0.6

cpe:2.3:a:wso2:api_manager:4.6.0.6
Wso2 » Api Manager » Version: 4.6.0.7

cpe:2.3:a:wso2:api_manager:4.6.0.7
Wso2 » Api Manager » Version: 4.6.0.8

cpe:2.3:a:wso2:api_manager:4.6.0.8
Wso2 » Traffic Manager » Version: 4.5.0

cpe:2.3:a:wso2:traffic_manager:4.5.0
Wso2 » Traffic Manager » Version: 4.5.0.17

cpe:2.3:a:wso2:traffic_manager:4.5.0.17
Wso2 » Traffic Manager » Version: 4.5.0.19

cpe:2.3:a:wso2:traffic_manager:4.5.0.19
Wso2 » Traffic Manager » Version: 4.5.0.27

cpe:2.3:a:wso2:traffic_manager:4.5.0.27
Wso2 » Traffic Manager » Version: 4.5.0.37

cpe:2.3:a:wso2:traffic_manager:4.5.0.37
Wso2 » Traffic Manager » Version: 4.5.0.42

cpe:2.3:a:wso2:traffic_manager:4.5.0.42
Wso2 » Traffic Manager » Version: 4.5.0.43

cpe:2.3:a:wso2:traffic_manager:4.5.0.43
Wso2 » Traffic Manager » Version: 4.5.0.47

cpe:2.3:a:wso2:traffic_manager:4.5.0.47
Wso2 » Traffic Manager » Version: 4.5.0.48

cpe:2.3:a:wso2:traffic_manager:4.5.0.48
Wso2 » Traffic Manager » Version: 4.5.0.53

cpe:2.3:a:wso2:traffic_manager:4.5.0.53
Wso2 » Traffic Manager » Version: 4.5.0.54

cpe:2.3:a:wso2:traffic_manager:4.5.0.54
Wso2 » Traffic Manager » Version: 4.5.0.9

cpe:2.3:a:wso2:traffic_manager:4.5.0.9
Wso2 » Traffic Manager » Version: 4.6.0

cpe:2.3:a:wso2:traffic_manager:4.6.0
Wso2 » Traffic Manager » Version: 4.6.0.12

cpe:2.3:a:wso2:traffic_manager:4.6.0.12
Wso2 » Traffic Manager » Version: 4.6.0.13

cpe:2.3:a:wso2:traffic_manager:4.6.0.13
Wso2 » Traffic Manager » Version: 4.6.0.18

cpe:2.3:a:wso2:traffic_manager:4.6.0.18
Wso2 » Traffic Manager » Version: 4.6.0.19

cpe:2.3:a:wso2:traffic_manager:4.6.0.19
Wso2 » Traffic Manager » Version: 4.6.0.3

cpe:2.3:a:wso2:traffic_manager:4.6.0.3
Wso2 » Traffic Manager » Version: 4.6.0.7

cpe:2.3:a:wso2:traffic_manager:4.6.0.7
Wso2 » Traffic Manager » Version: 4.6.0.8

cpe:2.3:a:wso2:traffic_manager:4.6.0.8
Wso2 » Universal Gateway » Version: 4.5.0

cpe:2.3:a:wso2:universal_gateway:4.5.0
Wso2 » Universal Gateway » Version: 4.5.0.17

cpe:2.3:a:wso2:universal_gateway:4.5.0.17
Wso2 » Universal Gateway » Version: 4.5.0.19

cpe:2.3:a:wso2:universal_gateway:4.5.0.19
Wso2 » Universal Gateway » Version: 4.5.0.27

cpe:2.3:a:wso2:universal_gateway:4.5.0.27
Wso2 » Universal Gateway » Version: 4.5.0.37

cpe:2.3:a:wso2:universal_gateway:4.5.0.37
Wso2 » Universal Gateway » Version: 4.5.0.42

cpe:2.3:a:wso2:universal_gateway:4.5.0.42
Wso2 » Universal Gateway » Version: 4.5.0.44

cpe:2.3:a:wso2:universal_gateway:4.5.0.44
Wso2 » Universal Gateway » Version: 4.5.0.48

cpe:2.3:a:wso2:universal_gateway:4.5.0.48
Wso2 » Universal Gateway » Version: 4.5.0.49

cpe:2.3:a:wso2:universal_gateway:4.5.0.49
Wso2 » Universal Gateway » Version: 4.5.0.54

cpe:2.3:a:wso2:universal_gateway:4.5.0.54
Wso2 » Universal Gateway » Version: 4.5.0.55

cpe:2.3:a:wso2:universal_gateway:4.5.0.55
Wso2 » Universal Gateway » Version: 4.5.0.9

cpe:2.3:a:wso2:universal_gateway:4.5.0.9
Wso2 » Universal Gateway » Version: 4.6.0

cpe:2.3:a:wso2:universal_gateway:4.6.0
Wso2 » Universal Gateway » Version: 4.6.0.12

cpe:2.3:a:wso2:universal_gateway:4.6.0.12
Wso2 » Universal Gateway » Version: 4.6.0.13

cpe:2.3:a:wso2:universal_gateway:4.6.0.13
Wso2 » Universal Gateway » Version: 4.6.0.18

cpe:2.3:a:wso2:universal_gateway:4.6.0.18
Wso2 » Universal Gateway » Version: 4.6.0.19

cpe:2.3:a:wso2:universal_gateway:4.6.0.19
Wso2 » Universal Gateway » Version: 4.6.0.3

cpe:2.3:a:wso2:universal_gateway:4.6.0.3
Wso2 » Universal Gateway » Version: 4.6.0.7

cpe:2.3:a:wso2:universal_gateway:4.6.0.7
Wso2 » Universal Gateway » Version: 4.6.0.8

cpe:2.3:a:wso2:universal_gateway:4.6.0.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-5430

Products

Pricing

Contact Us