[{"data":1,"prerenderedAt":66},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-119977":3},{"l":4,"details":28,"weitere":36,"indexierbar":64,"updated":65},{"cve":5,"status":6,"vendor":7,"product":8,"name":9,"added":10,"due":11,"ransomware":12,"published":13,"cwes":14,"cvss":16,"epss":21,"slug":24,"bereich":25,"schweregrad":26,"art":27,"produktLabel":8},"CVE-2026-119977","ausgenutzt","WordPress","WordPress Core","WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability","2026-11-03","2026-11-06",false,"2026-10-31",[15],"CWE-367",{"version":17,"score":18,"severity":19,"vector":20},"3.1",8.1,"HIGH","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"score":22,"percentile":23},0.01199,0.68421,"cve-2026-119977","web","hoch","Zeitkritischer Ablauffehler zwischen Prüfung und Nutzung",{"description":29,"refs":30},"WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window.",[31,34],{"url":32,"host":33},"https:\u002F\u002Fcore.trac.wordpress.org\u002Fbrowser\u002Ftags\u002F7.1.4\u002Fsrc\u002Fwp-admin\u002Fincludes\u002Fclass-wp-upgrader.php#L346","core.trac.wordpress.org",{"url":35,"host":33},"https:\u002F\u002Fcore.trac.wordpress.org\u002Fbrowser\u002Ftags\u002F7.1.4\u002Fsrc\u002Fwp-admin\u002Fincludes\u002Fupdate-core.php#L1545",[37,47,57],{"cve":38,"status":6,"produktLabel":39,"vendor":40,"product":41,"art":42,"bereich":25,"schweregrad":43,"score":44,"epss":45,"added":46,"ransomware":12},"CVE-2026-111793","Openwave Webtop Media Transcoder","Openwave Messaging Limited","Webtop Media Transcoder","Fehlerhafte Weitergabe von Ressourcen","mittel",4.3,0.00274,"2026-11-10",{"cve":48,"status":6,"produktLabel":49,"vendor":50,"product":51,"art":52,"bereich":25,"schweregrad":53,"score":54,"epss":55,"added":56,"ransomware":12},"CVE-2026-116779","SignalWire FreeSwitch","SignalWire","FreeSwitch","Einschleusen von Befehlen (Command Injection)","kritisch",9.8,0.02177,"2026-11-09",{"cve":58,"status":6,"produktLabel":59,"vendor":60,"product":61,"art":62,"bereich":25,"schweregrad":53,"score":54,"epss":63,"added":56,"ransomware":12},"CVE-2026-123218","IBM Aspera Faspex","IBM","Aspera Faspex","Fehlerhafte Berechtigungsprüfung",0.00705,true,"2026-11-12T13:05:11.283Z",1794488739041]