CVE-2026-119977 2

Vulnerability (CVE)

CISA Adds One Known Exploited Vulnerability to Catalog

Cyber Risks CISA Advisories Nov 03, 2026

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-119977 WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability This type of vulnerability...

Vulnerabilities & Patching

CVE-2026-119977: Word Press Word Press Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 03, 2026

WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths...

Vulnerabilities & Patching