Security
-
VULNCISA lists WordPress Core upgrade-window race condition CVE-2026-119977 as exploited
A race in WordPress Core full-package upgrades lets unauthenticated attackers run code in versions 4.7 through 7.1.3; CISA now lists it as exploited.
-
VULNCISA adds Apple pointer authentication bypass CVE-2024-27834 to the KEV catalog
CISA now lists CVE-2024-27834, an Apple Pointer Authentication bypass first published in NVD in 2024, as exploited; federal agencies must act by 2026-11-18.