WSO2 and Adobe Commerce Flaws Exploited in Attacks Added to CISA KEV

The US Cybersecurity and Infrastructure Security Agency CISA on Thursday added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation The vulnerabilities are listed below CVE20265430 CVS score 98 A path traversal vulnerability in WSO2 API Control Plane