CISA Known Exploited Vulnerabilities

KEV additions — November 2026

1 CVE entered the KEV catalog in November 2026.

Get an alert for each new CVE published for the software you run.

Watch your stackFree account · no credit card

Added November 3, 20261

CVE	Vulnerability	CVSS	EPSS	Due date
CVE-2026-119977 Watch CVE-2026-119977 for CVE-2026-119977	WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution	8.1	0.6 %	Nov 6, 2026

← All recent KEV additions

MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

CVE records are reproduced under the CVE Program Terms of Use: MITRE grants a perpetual, royalty-free licence to reproduce and redistribute them, provided this designation and the licence travel with every copy. Read the licence

This product uses data from the NVD API but is not endorsed or certified by the NVD.

Sources and licences of the CVE data