https://vulnerability.circl.lu/sightings/feed 2026-08-28T22:48:31.955398+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bc2d0748-9ac7-44f9-b765-63f24093a59a/export 2026-08-28T22:48:31.974883+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bc2d0748-9ac7-44f9-b765-63f24093a59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mu3adglncq2g", "content": "WordPress patched CVE-2026-65640, an authenticated RCE rated 8.8. Exploitation requires upload permissions plus Imagick and Ghostscript; Drupal is not identified as affected.\n\nhttps://bit.ly/3UCY1qj \n\n#WordPress #Security #Drupal", "creation_timestamp": "2026-08-27T16:10:27.061595Z"} 2026-08-27T16:10:27.061595+00:00 https://vulnerability.circl.lu/sighting/546f53c8-a7fd-4c74-9a50-69285e17e9b8/export 2026-08-28T22:48:31.976526+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "546f53c8-a7fd-4c74-9a50-69285e17e9b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://t.me/pphm_HackerNews/2622", "content": "\ud83d\udd34 WordPress 7.0.4 Patches Remote Code Execution Vulnerability\n\nWordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely.\n\nTracked as CVE-2026-65640 (CVSS score of 8.8), the security defect can be exploited by attackers with Author-level user or higher permissions via malicious Postscript file uploads.\n\nAccording to WordPress\u2019 advisory, the issue affects only installations that use Imagick and Ghostscript, as it was discovered in Ghostscript\u2019s handling of certain embedded files. Successful exploitation requires that an attacker has file upload rights.", "creation_timestamp": "2026-08-22T00:00:08.697164Z"} 2026-08-22T00:00:08.697164+00:00 https://vulnerability.circl.lu/sighting/3824fbaa-1f71-4d0c-a124-d28ce24f7769/export 2026-08-28T22:48:31.976643+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3824fbaa-1f71-4d0c-a124-d28ce24f7769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://t.me/pphm_HackerNews/2622", "content": "\ud83d\udd34 WordPress 7.0.4 Patches Remote Code Execution Vulnerability\n\nWordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely.\n\nTracked as CVE-2026-65640 (CVSS score of 8.8), the security defect can be exploited by attackers with Author-level user or higher permissions via malicious Postscript file uploads.\n\nAccording to WordPress\u2019 advisory, the issue affects only installations that use Imagick and Ghostscript, as it was discovered in Ghostscript\u2019s handling of certain embedded files. Successful exploitation requires that an attacker has file upload rights.", "creation_timestamp": "2026-08-21T23:00:05.818105Z"} 2026-08-21T23:00:05.818105+00:00 https://vulnerability.circl.lu/sighting/6a458a91-5bfe-4691-9a8c-e89ec6bb6c11/export 2026-08-28T22:48:31.976725+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6a458a91-5bfe-4691-9a8c-e89ec6bb6c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtcr4uqurc2n", "content": "WordPress\u3001\u6295\u7a3f\u8005\u6a29\u9650\u4ee5\u4e0a\u3067RCE\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027\u3092\u4fee\u6b63-CVE-2026-65640 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews\n#\u8106\u5f31\u6027", "creation_timestamp": "2026-08-17T22:34:27.313670Z"} 2026-08-17T22:34:27.313670+00:00 https://vulnerability.circl.lu/sighting/3532d771-59fa-4770-9a91-50e5cc6e1260/export 2026-08-28T22:48:31.976803+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3532d771-59fa-4770-9a91-50e5cc6e1260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mt757q4oxq2c", "content": "\ud83d\udce2 Vuln\u00e9rabilit\u00e9 critique d'ex\u00e9cution de code \u00e0 distance dans WordPress (CVE-2026-65640)\n\nLe CERT-FR a publi\u00e9 le 13 ao\u00fbt 2026 l'avis CERTFR-2026-AVI-1018 signalant une vuln\u00e9rabilit\u00e9 dans WordPress, bas\u00e9 sur le bulletin de s\u00e9curit\u00e9\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#WordPress #CERTFR #Cyberveille", "creation_timestamp": "2026-08-16T12:00:06.994136Z"} 2026-08-16T12:00:06.994136+00:00 https://vulnerability.circl.lu/sighting/fd429c18-8300-4cb4-8e6b-6ef2dee492c9/export 2026-08-28T22:48:31.976880+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fd429c18-8300-4cb4-8e6b-6ef2dee492c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "published-proof-of-concept", "source": "Telegram/xINMrV1P3uzkQaEp3YbshoNNnD8RshvL3z1xc4hsDELyb0o", "content": "", "creation_timestamp": "2026-08-16T00:00:37.927022Z"} 2026-08-16T00:00:37.927022+00:00 https://vulnerability.circl.lu/sighting/25330474-d213-48f8-8e44-7c8662bf27bb/export 2026-08-28T22:48:31.976956+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "25330474-d213-48f8-8e44-7c8662bf27bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "Telegram/xINMrV1P3uzkQaEp3YbshoNNnD8RshvL3z1xc4hsDELyb0o", "content": "", "creation_timestamp": "2026-08-15T08:00:06.131089Z"} 2026-08-15T08:00:06.131089+00:00 https://vulnerability.circl.lu/sighting/3c5b6e89-9098-4d80-9be2-884051d37245/export 2026-08-28T22:48:31.977032+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3c5b6e89-9098-4d80-9be2-884051d37245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2bnwnk6c2l", "content": "WordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:20.172672Z"} 2026-08-14T13:36:20.172672+00:00 https://vulnerability.circl.lu/sighting/732bb31a-bffe-4667-b37b-5e1be1832b24/export 2026-08-28T22:48:31.977112+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "732bb31a-bffe-4667-b37b-5e1be1832b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094124673780642", "content": "\ud83d\udcf0 WordPress patches critical RCE flaw (CVE-2026-65640) for author-level users\nWordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-wordpress-allows-author-level-users-to-take-over-sites/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:06.942319Z"} 2026-08-14T13:36:06.942319+00:00 https://vulnerability.circl.lu/sighting/387c1a2a-fd8f-406c-98cb-4714af44ccd6/export 2026-08-28T22:48:31.977189+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "387c1a2a-fd8f-406c-98cb-4714af44ccd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mszxaxwzcq2f", "content": "\ud83d\udce2 WordPress 7.0.4 corrige une RCE via fichiers PostScript malveillants (CVE-2026-65640)\n\nCet article rapporte la publication par WordPress d'un correctif pour une vuln\u00e9rabilit\u00e9 d'ex\u00e9cution de code \u00e0 distance (RCE) de haute s\u00e9v\u00e9rit\u00e9\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#RCE #WordPress #Cyberveille", "creation_timestamp": "2026-08-14T10:30:07.609872Z"} 2026-08-14T10:30:07.609872+00:00