A critical security flaw, CVE-2026-5430 (CVSS 9.8), in WSO2 API Manager is under active exploitation. The vulnerability, an improper verification of a cryptographic signature, allows attackers to forge admin tokens and achieve account takeover. WatchTowr reports that this flaw enables attackers to bypass JWT authentication, posing a significant risk to affected deployments.