PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-119977 WordPress CVE debrief

CVE-2026-119977 is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in WordPress Core. According to the CISA Known Exploited Vulnerabilities catalog, this vulnerability has been added to the catalog and requires immediate attention. The CVE record was published on 2026-11-03T00:00:00.000Z and has not been modified since then. System administrators and security teams responsible for WordPress Core installations should assess exposure and prioritize patching according to CISA’s BOD 26-04 guidance. Affected product deployments need to be identified in managed environments, and owners assigned for follow-up. The vulnerability class is a TOCTOU Race Condition, which can

Vendor
WordPress
Product
WordPress Core
CVSS
HIGH 8.1
CISA KEV
Listed
Original CVE published
2026-11-03
Original CVE updated
2026-11-03
Advisory published
2026-11-03
Advisory updated
2026-11-03

Who should care

System administrators and security teams responsible for WordPress Core installations should assess exposure and prioritize patching according to CISA’s BOD 26-04 guidance.

Why it matters

CVE-2026-119977 is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in WordPress Core. The CISA Known Exploited Vulnerabilities catalog requires immediate attention. System administrators and security teams should assess exposure and prioritize patching according to CISA’s BOD 26-04 guidance.

  • Verify potential exposure to TOCTOU attacks
  • Assess and prioritize patching for WordPress Core installations
  • Ensure compliance with CISA’s BOD 26-04 guidance

Technical summary

CVE-2026-119977 is a Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability in WordPress Core. The vulnerability has been added to the CISA Known Exploited Vulnerabilities catalog. This type of vulnerability can allow attackers to exploit the race condition between the time of check and time of use, potentially leading to security breaches. Review and apply mitigations in accordance with vendor instructions to address this vulnerability. Ensure compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk guidance and evaluate each asset's

Defensive priority

High

Recommended defensive actions

  • Review and apply mitigations in accordance with vendor instructions
  • Ensure compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk guidance
  • Evaluate each asset's internet exposure and ensure adherence to BOD 26-04 patching guidelines

Evidence notes

The CISA Known Exploited Vulnerabilities catalog and CVE Program record provide details about this vulnerability. However, the scope of affected versions and potential impact require verification from official sources.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-119977 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-119977

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-119977 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-119977

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

  • CISA Known Exploited Vulnerabilities catalog

    Publisher, destination, and source semantics verified

    URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

    Cybersecurity and Infrastructure Security Agency - Official CISA catalog of vulnerabilities known to be exploited in the wild.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.