Topic

Cve 2026 87902

Coverage tagged cve 2026 87902.

Articles: 1
Desk: 1

Data graphic: a timeline of WordPress core flaw CVE-2026-87902 CVSS 4.0 9.2 , zooming into 22 September, the day the fix shipped in 25 releases. Patchstack logged the first exploit attempt at 11:49 UTC and the first pearcmd.php file-write attempt at 15:34 UTC that same day; the bug had been reported 64 days earlier on 20 July, and CISA added it to KEV on 25 September with a 28 September deadline.

highExploits Cve 2026 87902

WordPress Core Flaw CVE-2026-87902 Drew Exploit Attempts on Patch Day

A WordPress core path traversal, CVE-2026-87902, can reach RCE through pearcmd.php. Probes began the day the fix shipped and CISA lists it as exploited.

Oct 2 · 7 min