gcdRadar
tags/Attack types

race-condition

1 live · 3 on record · last incident 11 days ago

Dec ’25records per month, by first reportNov ’26

Live1

  1. live8.1
    WordPress Core CVE-2026-119977: WordPress Core Time-of-Check Time-of-Use Race Condition Vulnerability

    Patch now · Exploited · Patched · since 3 Nov 2026 · updated 6 Nov 2026 · CVE-2026-119977

    WordPress core contains a time-of-check time-of-use race condition vulnerability allowing unauthenticated attackers to execute code via predictable staging paths during upgrades. CISA added the flaw to its known exploited vulnerabilities catalog following confirmed in-the-wild exploitation.

    Do:Block web access to the staging directory while applying WordPress updates to prevent race condition exploitation during the installation phase.

Earlier2

  1. closed7.1
    Agno CVE-2025-64168: Agno session state overwrite vulnerability

    Patch now · Disclosed · since 31 Oct 2025 · CVE-2025-64168

    AI
  2. closed8.8
    Gradio CVE-2024-47870: Gradio race condition allows traffic redirection

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47870

    AI