Cyber Security· Important
CISA flags actively exploited WordPress race condition vulnerability
CISA has updated its Known Exploited Vulnerabilities (KEV) Catalog to include CVE-2026-119977, a time-of-check time-of-use (TOCTOU) race condition flaw in WordPress Core. This vulnerability is confirmed to be under active exploitation and poses a significant risk to affected assets.