https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 14 Aug 2026 23:11:22 +0000 https://vulnerability.circl.lu/sighting/3c5b6e89-9098-4d80-9be2-884051d37245/export {"uuid": "3c5b6e89-9098-4d80-9be2-884051d37245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2bnwnk6c2l", "content": "WordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:20.172672Z"} {"uuid": "3c5b6e89-9098-4d80-9be2-884051d37245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2bnwnk6c2l", "content": "WordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:20.172672Z"} https://vulnerability.circl.lu/sighting/3c5b6e89-9098-4d80-9be2-884051d37245/export Fri, 14 Aug 2026 13:36:20 +0000 https://vulnerability.circl.lu/sighting/732bb31a-bffe-4667-b37b-5e1be1832b24/export {"uuid": "732bb31a-bffe-4667-b37b-5e1be1832b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094124673780642", "content": "\ud83d\udcf0 WordPress patches critical RCE flaw (CVE-2026-65640) for author-level users\nWordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-wordpress-allows-author-level-users-to-take-over-sites/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:06.942319Z"} {"uuid": "732bb31a-bffe-4667-b37b-5e1be1832b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094124673780642", "content": "\ud83d\udcf0 WordPress patches critical RCE flaw (CVE-2026-65640) for author-level users\nWordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-wordpress-allows-author-level-users-to-take-over-sites/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:06.942319Z"} https://vulnerability.circl.lu/sighting/732bb31a-bffe-4667-b37b-5e1be1832b24/export Fri, 14 Aug 2026 13:36:06 +0000 https://vulnerability.circl.lu/sighting/387c1a2a-fd8f-406c-98cb-4714af44ccd6/export {"uuid": "387c1a2a-fd8f-406c-98cb-4714af44ccd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mszxaxwzcq2f", "content": "\ud83d\udce2 WordPress 7.0.4 corrige une RCE via fichiers PostScript malveillants (CVE-2026-65640)\n\nCet article rapporte la publication par WordPress d'un correctif pour une vuln\u00e9rabilit\u00e9 d'ex\u00e9cution de code \u00e0 distance (RCE) de haute s\u00e9v\u00e9rit\u00e9\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#RCE #WordPress #Cyberveille", "creation_timestamp": "2026-08-14T10:30:07.609872Z"} {"uuid": "387c1a2a-fd8f-406c-98cb-4714af44ccd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mszxaxwzcq2f", "content": "\ud83d\udce2 WordPress 7.0.4 corrige une RCE via fichiers PostScript malveillants (CVE-2026-65640)\n\nCet article rapporte la publication par WordPress d'un correctif pour une vuln\u00e9rabilit\u00e9 d'ex\u00e9cution de code \u00e0 distance (RCE) de haute s\u00e9v\u00e9rit\u00e9\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#RCE #WordPress #Cyberveille", "creation_timestamp": "2026-08-14T10:30:07.609872Z"} https://vulnerability.circl.lu/sighting/387c1a2a-fd8f-406c-98cb-4714af44ccd6/export Fri, 14 Aug 2026 10:30:07 +0000 https://vulnerability.circl.lu/sighting/6e5ca7c6-fcd8-4620-bb45-a20fbad9e7e3/export {"uuid": "6e5ca7c6-fcd8-4620-bb45-a20fbad9e7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3msz6o4fymm23", "content": "WordPress 7.0.4: parcha la vulnerabilidad RCE CVE-2026-65640\n\n#cve202665640 #rcewordpress #imagickghostscript #wordpress704 #ejecucionremotadecodigo", "creation_timestamp": "2026-08-14T03:10:04.732850Z"} {"uuid": "6e5ca7c6-fcd8-4620-bb45-a20fbad9e7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3msz6o4fymm23", "content": "WordPress 7.0.4: parcha la vulnerabilidad RCE CVE-2026-65640\n\n#cve202665640 #rcewordpress #imagickghostscript #wordpress704 #ejecucionremotadecodigo", "creation_timestamp": "2026-08-14T03:10:04.732850Z"} https://vulnerability.circl.lu/sighting/6e5ca7c6-fcd8-4620-bb45-a20fbad9e7e3/export Fri, 14 Aug 2026 03:10:04 +0000 https://vulnerability.circl.lu/sighting/dd0ca9c0-0d68-4794-852e-139f030c54b4/export {"uuid": "dd0ca9c0-0d68-4794-852e-139f030c54b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msy7ox6qqc2b", "content": "WordPress 704 Security Update: A Claimed CVE-2026-65640 Flaw Puts Author-Level Uploads Under the Microscope +\u00a0Video\n\nA New WordPress Security Warning Is Raising Fresh Concerns WordPress powers a huge portion of the modern web, which makes every serious vulnerability in its ecosystem worth watching\u2026", "creation_timestamp": "2026-08-13T17:55:47.556344Z"} {"uuid": "dd0ca9c0-0d68-4794-852e-139f030c54b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msy7ox6qqc2b", "content": "WordPress 704 Security Update: A Claimed CVE-2026-65640 Flaw Puts Author-Level Uploads Under the Microscope +\u00a0Video\n\nA New WordPress Security Warning Is Raising Fresh Concerns WordPress powers a huge portion of the modern web, which makes every serious vulnerability in its ecosystem worth watching\u2026", "creation_timestamp": "2026-08-13T17:55:47.556344Z"} https://vulnerability.circl.lu/sighting/dd0ca9c0-0d68-4794-852e-139f030c54b4/export Thu, 13 Aug 2026 17:55:47 +0000 https://vulnerability.circl.lu/sighting/fa666935-6ed8-4296-a51d-b537685e0079/export {"uuid": "fa666935-6ed8-4296-a51d-b537685e0079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msy5gphya62y", "content": "WordPress 7.0.4 patches CVE-2026-65640, an 8.8 flaw that could let Author-level attackers trigger remote code execution via crafted PostScript uploads on sites using Imagick and Ghostscript. #WordPress #CVE-2026-65640 #Imagick", "creation_timestamp": "2026-08-13T17:15:22.667941Z"} {"uuid": "fa666935-6ed8-4296-a51d-b537685e0079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msy5gphya62y", "content": "WordPress 7.0.4 patches CVE-2026-65640, an 8.8 flaw that could let Author-level attackers trigger remote code execution via crafted PostScript uploads on sites using Imagick and Ghostscript. #WordPress #CVE-2026-65640 #Imagick", "creation_timestamp": "2026-08-13T17:15:22.667941Z"} https://vulnerability.circl.lu/sighting/fa666935-6ed8-4296-a51d-b537685e0079/export Thu, 13 Aug 2026 17:15:22 +0000 https://vulnerability.circl.lu/sighting/adeb9864-6792-4f0a-8778-788990f3c0d0/export {"uuid": "adeb9864-6792-4f0a-8778-788990f3c0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3msy24cmzpe2h", "content": "WordPress 7.0.4 corrige RCE v\u00eda PostScript; afecta instalaciones con Imagick\n\nWordPress lanz\u00f3 7.0.4 para parchear CVE-2026-65640 (CVSS 8.8): un atacante con permisos\u2026\n\nhttps://mentehackers.com/wordpress-patch-rce-postscript-imagick-893d6bc1\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-13T16:15:54.341860Z"} {"uuid": "adeb9864-6792-4f0a-8778-788990f3c0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3msy24cmzpe2h", "content": "WordPress 7.0.4 corrige RCE v\u00eda PostScript; afecta instalaciones con Imagick\n\nWordPress lanz\u00f3 7.0.4 para parchear CVE-2026-65640 (CVSS 8.8): un atacante con permisos\u2026\n\nhttps://mentehackers.com/wordpress-patch-rce-postscript-imagick-893d6bc1\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-13T16:15:54.341860Z"} https://vulnerability.circl.lu/sighting/adeb9864-6792-4f0a-8778-788990f3c0d0/export Thu, 13 Aug 2026 16:15:54 +0000 https://vulnerability.circl.lu/sighting/197db730-8f8c-4d3f-ad0d-32f84d59ebc7/export {"uuid": "197db730-8f8c-4d3f-ad0d-32f84d59ebc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/117088692616270994", "content": "\u2026et encore une vuln\u00e9rabilit\u00e9 critique dans #WordPress, trouv\u00e9e une nouvelle fois par pwn.ai, qui a n\u00e9cessit\u00e9 la publication en urgence de la mise \u00e0 jour 7.0.4\nLa CVE-2026-65640 est une RCE assez int\u00e9ressante c\u00f4t\u00e9 traitement d\u2019images. (ImageMagick)\nUn utilisateur avec le r\u00f4le Author peut envoyer un fichier nomm\u00e9 comme une innocente image .png, alors que son contenu est en r\u00e9alit\u00e9 du PostScript/EPS. WordPress se fiait trop \u00e0 l\u2019extension ; ImageMagick, lui, regarde le contenu et peut transmettre le fichier \u00e0 Ghostscript\u2026 avec \u00e0 la cl\u00e9 une ex\u00e9cution de code.\nCe n\u2019est donc pas une RCE pr\u00e9-auth : il faut d\u00e9j\u00e0 disposer d\u2019un compte Author. Mais sur un site multi-auteurs, communautaire ou avec des comptes peu ma\u00eetris\u00e9s, le risque devient nettement plus concret. \ud83d\udc47 https://wordpress.org/news/2026/08/wordpress-7-0-4-release/\u2b07\ufe0f https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-8vr3-7mxf-gx8w\n#CyberVeille", "creation_timestamp": "2026-08-13T14:34:22.756706Z"} {"uuid": "197db730-8f8c-4d3f-ad0d-32f84d59ebc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/117088692616270994", "content": "\u2026et encore une vuln\u00e9rabilit\u00e9 critique dans #WordPress, trouv\u00e9e une nouvelle fois par pwn.ai, qui a n\u00e9cessit\u00e9 la publication en urgence de la mise \u00e0 jour 7.0.4\nLa CVE-2026-65640 est une RCE assez int\u00e9ressante c\u00f4t\u00e9 traitement d\u2019images. (ImageMagick)\nUn utilisateur avec le r\u00f4le Author peut envoyer un fichier nomm\u00e9 comme une innocente image .png, alors que son contenu est en r\u00e9alit\u00e9 du PostScript/EPS. WordPress se fiait trop \u00e0 l\u2019extension ; ImageMagick, lui, regarde le contenu et peut transmettre le fichier \u00e0 Ghostscript\u2026 avec \u00e0 la cl\u00e9 une ex\u00e9cution de code.\nCe n\u2019est donc pas une RCE pr\u00e9-auth : il faut d\u00e9j\u00e0 disposer d\u2019un compte Author. Mais sur un site multi-auteurs, communautaire ou avec des comptes peu ma\u00eetris\u00e9s, le risque devient nettement plus concret. \ud83d\udc47 https://wordpress.org/news/2026/08/wordpress-7-0-4-release/\u2b07\ufe0f https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-8vr3-7mxf-gx8w\n#CyberVeille", "creation_timestamp": "2026-08-13T14:34:22.756706Z"} https://vulnerability.circl.lu/sighting/197db730-8f8c-4d3f-ad0d-32f84d59ebc7/export Thu, 13 Aug 2026 14:34:22 +0000 https://vulnerability.circl.lu/sighting/f87f3302-fb06-4864-9659-3f4c378b8874/export {"uuid": "f87f3302-fb06-4864-9659-3f4c378b8874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msxtt3tlok25", "content": "WordPress\u304c7.0.4\u3092\u516c\u958b\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nWordPress\u306f\u6c34\u66dc\u65e5\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u6df1\u523b\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u767a\u8868\u3057\u307e\u3057\u305f\u3002 CVE-2026-65640(CVSS\u30b9\u30b3\u30a28.8)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001\u60aa\u610f\u306e\u3042\u308bPostscript\u30d5\u30a1\u30a4\u30eb\u306e\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3092\u901a\u3058\u3066\u3001Author\u6a29\u9650\u4ee5\u4e0a\u3092\u6301\u3064", "creation_timestamp": "2026-08-13T14:23:21.094173Z"} {"uuid": "f87f3302-fb06-4864-9659-3f4c378b8874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msxtt3tlok25", "content": "WordPress\u304c7.0.4\u3092\u516c\u958b\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nWordPress\u306f\u6c34\u66dc\u65e5\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u6df1\u523b\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u767a\u8868\u3057\u307e\u3057\u305f\u3002 CVE-2026-65640(CVSS\u30b9\u30b3\u30a28.8)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001\u60aa\u610f\u306e\u3042\u308bPostscript\u30d5\u30a1\u30a4\u30eb\u306e\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3092\u901a\u3058\u3066\u3001Author\u6a29\u9650\u4ee5\u4e0a\u3092\u6301\u3064", "creation_timestamp": "2026-08-13T14:23:21.094173Z"} https://vulnerability.circl.lu/sighting/f87f3302-fb06-4864-9659-3f4c378b8874/export Thu, 13 Aug 2026 14:23:21 +0000 https://vulnerability.circl.lu/sighting/8d001b51-effd-4ea6-9c9f-525d55ff627c/export {"uuid": "8d001b51-effd-4ea6-9c9f-525d55ff627c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxsjkvvxf2d", "content": "\ud83d\udd17 CVE : CVE-2026-65640", "creation_timestamp": "2026-08-13T14:00:07.407108Z"} {"uuid": "8d001b51-effd-4ea6-9c9f-525d55ff627c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxsjkvvxf2d", "content": "\ud83d\udd17 CVE : CVE-2026-65640", "creation_timestamp": "2026-08-13T14:00:07.407108Z"} https://vulnerability.circl.lu/sighting/8d001b51-effd-4ea6-9c9f-525d55ff627c/export Thu, 13 Aug 2026 14:00:07 +0000