CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited WordPress Core remote file inclusion CVE-2026-87902 to the KEV catalog.
CISA added CVE-2026-87902, a WordPress Core remote file inclusion vulnerability, to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. CISA says this class of flaw is a frequent attack vector and a significant risk to the federal enterprise. Under Binding Operational Directive 26-04, Federal Civilian Executive Branch agencies must prioritize rapid remediation of KEV-listed high-risk vulnerabilities on exposed assets. CISA urges all organizations to remediate KEV entries using risk-based vulnerability management.
- CISA added CVE-2026-87902 to the KEV Catalog.
- Flaw is a WordPress Core remote file inclusion bug.
- Addition is based on evidence of active exploitation.
- BOD 26-04 requires FCEB agencies to prioritize remediation of KEV flaws.
- CVEs
- CVE-2026-87902
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-87902 | Unauthenticated Local File Inclusion to RCE in WordPress Core (fixed in 7.1.2) | 8.1 | 96% | KEVPoC ×23 | KEV |
From the original article
1 min read at cisa.govCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-87902 WordPress Core Remote File Inclusion Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.