Results for “race condition”

2 stories found

WordPress core update flaw CVE-2026-119977 is now on CISA's exploited list: check you're on 7.1.4

CISA added CVE-2026-119977, a race condition in WordPress core's own updater, to its Known Exploited Vulnerabilities catalog on November 3. It affects WordPress 4.7 through 7.1.3 and can give an unauthenticated attacker code execution during a core update, so every self-hosted site should confirm it is on 7.1.4 or its branch's latest release.

2h ago · 3 min read

Security

Ivanti Connect Secure: three chained zero-days are exploited. Patching isn't enough — assume compromise

Attackers chained an authentication bypass with two newer Ivanti Connect Secure flaws to get root on VPN appliances, and CISA's first federal deadline has already passed. Here's which builds fix it and what to check if your box was exposed.

1d ago · 3 min read