https://infosecpwn.com/tags/cve-2026-71362/ Recent content in Cve-2026-71362 on infosecpwn https://infosecpwn.com/og-default.png https://infosecpwn.com/og-default.png Hugo en-us Fri, 25 Sep 2026 09:00:00 -0400 https://infosecpwn.com/posts/2026-09-25-kev-wso2-adobe-commerce-due-sunday/ Fri, 25 Sep 2026 09:00:00 -0400 https://infosecpwn.com/posts/2026-09-25-kev-wso2-adobe-commerce-due-sunday/ Two CVEs were added to KEV on 24 September with a 27 September deadline. The catalog calls the WSO2 one a path traversal with unrestricted file upload. The vendor, the CNA, NVD and CISA's own CWE field all say it is a JWT signature bypass. If you triage from the description you will hunt for the wrong artefacts.