toctou
1 live · 5 on record · last incident 11 days ago
Live1
- live8.1WordPress Core CVE-2026-119977: WordPress Core Time-of-Check Time-of-Use Race Condition Vulnerability
Patch now · Exploited · Patched · since 3 Nov 2026 · updated 6 Nov 2026 · CVE-2026-119977
WordPress core contains a time-of-check time-of-use race condition vulnerability allowing unauthenticated attackers to execute code via predictable staging paths during upgrades. CISA added the flaw to its known exploited vulnerabilities catalog following confirmed in-the-wild exploitation.
Do:Block web access to the staging directory while applying WordPress updates to prevent race condition exploitation during the installation phase.
Earlier4
- closed7.7Claude Code + SDKs CVE-2026-103435: Time-of-check to time-of-use vulnerability in Claude Code sandbox
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-103435
AI - closed8.1Open WebUI CVE-2026-45675: Open WebUI LDAP and OAuth Admin Race Condition
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45675
AI - closed2.6Langchain-Chatchat CVE-2026-7846: TOCTOU vulnerability in Langchain-Chatchat file upload
Patch now · Disclosed · since 5 May 2026 · CVE-2026-7846
AI - closed8.0GitHub Copilot CVE-2026-21523: Race condition in GitHub Copilot and Visual Studio
Patch now · Disclosed · since 10 Feb 2026 · CVE-2026-21523
AI