As cited
Copy frozen at (site build).
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-119977, a WordPress Core time-of-check time-of-use race condition vulnerability, to its Known Exploited Vulnerabilities Catalog based on confirmed active exploitation. The vulnerability allows attackers to gain complete control of affected systems. Federal agencies must prioritize patching this vulnerability under Binding Operational Directive 26-04, while CISA recommends all organizations treat it as high-priority in their vulnerability management programs.
Why it matters: WordPress administrators and organizations running affected versions need to patch immediately; federal agencies face compliance mandates to remediate this known exploited vulnerability on internet-facing assets.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-119977, a WordPress Core time-of-check time-of-use race condition vulnerability with a CVSS score of 8.1, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. The vulnerability allows attackers to gain total control of affected systems and poses significant risk to federal agencies, which must prioritize its remediation under Binding Operational Directive 26-04.
Why it matters: Federal Civilian Executive Branch agencies must prioritize patching CVE-2026-119977 on publicly exposed assets immediately, and all organizations should treat KEV Catalog vulnerabilities as high-priority remediation targets given active exploitation in the wild.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-119977, a WordPress Core time-of-check time-of-use race condition vulnerability with a CVSS score of 8.1, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. The vulnerability allows attackers to gain total control of affected systems and poses significant risk to federal agencies, which must prioritize its remediation under Binding Operational Directive 26-04.
Why it matters: Federal Civilian Executive Branch agencies must prioritize patching CVE-2026-119977 on publicly exposed assets immediately, and all organizations should treat KEV Catalog vulnerabilities as high-priority remediation targets given active exploitation in the wild.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-119977, a WordPress Core time-of-check time-of-use race condition vulnerability with a CVSS score of 8.1, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. The vulnerability allows attackers to gain total control of affected systems and poses significant risk to federal agencies, which must prioritize its remediation under Binding Operational Directive 26-04.
Why it matters: Federal Civilian Executive Branch agencies must prioritize patching CVE-2026-119977 on publicly exposed assets immediately, and all organizations should treat KEV Catalog vulnerabilities as high-priority remediation targets given active exploitation in the wild.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-119977, a WordPress Core time-of-check time-of-use race condition vulnerability with a CVSS score of 8.1, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. The vulnerability allows attackers to gain total control of affected systems and poses significant risk to federal agencies, which must prioritize its remediation under Binding Operational Directive 26-04.
Why it matters: Federal Civilian Executive Branch agencies must prioritize patching CVE-2026-119977 on publicly exposed assets immediately, and all organizations should treat KEV Catalog vulnerabilities as high-priority remediation targets given active exploitation in the wild.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-119977, a WordPress Core time-of-check time-of-use race condition vulnerability with a CVSS score of 8.1, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. The vulnerability allows attackers to gain total control of affected systems and poses significant risk to federal agencies, which must prioritize its remediation under Binding Operational Directive 26-04.
Why it matters: Federal Civilian Executive Branch agencies must prioritize patching CVE-2026-119977 on publicly exposed assets immediately, and all organizations should treat KEV Catalog vulnerabilities as high-priority remediation targets given active exploitation in the wild.
- Source published
- First seen by Cybersecurity Tracker