CVE-2026-17123

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 18, 2026

Last Seen

August 18, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Unauthenticated Path Traversal Vulnerability in WordPress73.5

On September 22, 2026, WordPress released version 7.1.2 to address a critical unauthenticated path traversal vulnerability tracked as CVE-2026-87902. This flaw allows unauthenticated attackers to include local PHP files from outside the active theme directories, potentially leading to remote code ex...