The Hacker News(@TheHackersNews):WSO2 and Adobe Commerce flaws are being exploited in attacks. The WSO2 bug can lead to remote code execution through unrestricted file upload. The Adobe flaw can switch a customer session to another account. CISA has added both to KEV, with federal agencies given until Sept. 27 to patch. What attackers can exploit:

The Hacker News

@TheHackersNews

The #1# trusted source for cybersecurity news, insights, and analysis — built for defenders and trusted by decision-makers.

加入 October 2010

2K 正在關注 2.4M 粉絲

The Hacker News@TheHackersNews

2026.09.25 04:46

WSO2 and Adobe Commerce flaws are being exploited in attacks. The WSO2 bug can lead to remote code execution through unrestricted file upload. The Adobe flaw can switch a customer session to another account. CISA has added both to KEV, with federal agencies given until Sept. 27 to patch. What attackers can exploit: