Threat Pulse 62High
CISA KEV Nov 4 to 6: WordPress RCE CVE-2026-119977, Apple CVE-2024-27834, SonicWall SSL-VPN MFA bypass CVE-2026-19868
Severity 7ActiveconfirmedWeb servers and gateways

CISA KEV Nov 4 to 6: WordPress RCE CVE-2026-119977, Apple CVE-2024-27834, SonicWall SSL-VPN MFA bypass CVE-2026-19868

· 10 days ago · bleepingcomputer.com
On X
@CISACyberverifiedNov 4, 13:19 UTC

🛡️We added WordPress remote code execution vulnerability CVE-2026-119977 to our KEV Catalog. Visit & apply mitigations to protect your org. #Cybersecurity #InfoSec

Open on X
@BleepinComputerverifiedNov 4, 12:11 UTC

CISA flags WordPress RCE flaw as actively exploited in attacks

Open on X
@CISACyberverifiedNov 4, 20:49 UTC

🛡️We added improper authentication vulnerability CVE-2024-27834 affecting multiple Apple products to our Known Exploited Vulnerabilities Catalog. Visit & apply mitigations to protect your org. #Cybersecurity #InfoSec

Open on X
@TheHackersNewsverifiedNov 5, 05:19 UTC

🚨 Hackers are exploiting an Apple security flaw patched over two years ago. CISA has added CVE-2024-27834 to its exploited vulnerabilities list following reports of attacks delivering information-stealing malware. Here's what the attacks involve ↓

Open on X
@BleepinComputerverifiedNov 7, 00:01 UTC

SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks

Open on X
@SecurityWeekverifiedNov 7, 10:18 UTC

SonicWall Patches Exploited SonicOS Bug That Weakens VPN Logins

Open on X
Why this score

Plan rubric with caps (verified sweep, Nov 11)

Updated Nov 14, 03:49 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.