WSO2 CVE-2026-5430 admin API access with forged alg=none JWT

Arnold Chan@slaz

•updated Sep 16, 2026•0•0•2

Detects incoming HTTP requests to the WSO2 admin API endpoint that utilize a JSON Web Token (JWT) with the 'alg=none' algorithm, indicating an attempt to bypass authentication via JWT token forgery (CVE-2026-5430).