type: cve · created: 2026-11-05 · updated: 2026-11-05 · tags: [cve] · confidence: medium · severity: high · affected_sectors: [global] · au_impact: false
CISA's KEV activity over the past week has been steady: WordPress Core (CVE-2026-119977, added 3 November and covered in yesterday's digest), Ivanti Connect Secure (30 October), GitLab, Cisco Secure Firewall, VMware ESX and the Linux kernel (28–29 October).
| Attribute | Detail |
|---|---|
| CVE | CVE-2026-119977 |
| CVSS | 8.1 (HIGH) |
| Vendor / product | wordpress |
| Reported | 2026-11-05 |