WSO2 API Manager JWT Algorithm Confusion Bypass Attempt

Min Sakka@AlphaOmega

•updated Sep 16, 2026•1•0•10

Detects potential JWT algorithm-confusion or authentication-bypass attempts targeting WSO2 API Manager components through JWTs specifying unsupported, downgraded, or unexpected signing algorithms such as "none" or HS256 where asymmetric signing is expected. Matching events should be investigated to determine whether the request represents exploitation of CVE-2026-5430.