Technology

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Cybersecurity and Infrastructure Security Agency + 2 others · Updated 1h ago

Facts

The new vulnerability is CVE-2026-119977, a WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability. ^[2]
BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities. ^[2]

Primary source

Cybersecurity and Infrastructure Security Agency

Published Oct 30, 2026

Primary source

Cybersecurity and Infrastructure Security Agency

Published Nov 3, 2026

Primary source

Cybersecurity and Infrastructure Security Agency

Published Nov 4, 2026