https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 28 Aug 2026 22:48:31 +0000 https://vulnerability.circl.lu/sighting/bc2d0748-9ac7-44f9-b765-63f24093a59a/export {"uuid": "bc2d0748-9ac7-44f9-b765-63f24093a59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mu3adglncq2g", "content": "WordPress patched CVE-2026-65640, an authenticated RCE rated 8.8. Exploitation requires upload permissions plus Imagick and Ghostscript; Drupal is not identified as affected.\n\nhttps://bit.ly/3UCY1qj \n\n#WordPress #Security #Drupal", "creation_timestamp": "2026-08-27T16:10:27.061595Z"} {"uuid": "bc2d0748-9ac7-44f9-b765-63f24093a59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mu3adglncq2g", "content": "WordPress patched CVE-2026-65640, an authenticated RCE rated 8.8. Exploitation requires upload permissions plus Imagick and Ghostscript; Drupal is not identified as affected.\n\nhttps://bit.ly/3UCY1qj \n\n#WordPress #Security #Drupal", "creation_timestamp": "2026-08-27T16:10:27.061595Z"} https://vulnerability.circl.lu/sighting/bc2d0748-9ac7-44f9-b765-63f24093a59a/export Thu, 27 Aug 2026 16:10:27 +0000 https://vulnerability.circl.lu/sighting/546f53c8-a7fd-4c74-9a50-69285e17e9b8/export {"uuid": "546f53c8-a7fd-4c74-9a50-69285e17e9b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://t.me/pphm_HackerNews/2622", "content": "\ud83d\udd34 WordPress 7.0.4 Patches Remote Code Execution Vulnerability\n\nWordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely.\n\nTracked as CVE-2026-65640 (CVSS score of 8.8), the security defect can be exploited by attackers with Author-level user or higher permissions via malicious Postscript file uploads.\n\nAccording to WordPress\u2019 advisory, the issue affects only installations that use Imagick and Ghostscript, as it was discovered in Ghostscript\u2019s handling of certain embedded files. Successful exploitation requires that an attacker has file upload rights.", "creation_timestamp": "2026-08-22T00:00:08.697164Z"} {"uuid": "546f53c8-a7fd-4c74-9a50-69285e17e9b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://t.me/pphm_HackerNews/2622", "content": "\ud83d\udd34 WordPress 7.0.4 Patches Remote Code Execution Vulnerability\n\nWordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely.\n\nTracked as CVE-2026-65640 (CVSS score of 8.8), the security defect can be exploited by attackers with Author-level user or higher permissions via malicious Postscript file uploads.\n\nAccording to WordPress\u2019 advisory, the issue affects only installations that use Imagick and Ghostscript, as it was discovered in Ghostscript\u2019s handling of certain embedded files. Successful exploitation requires that an attacker has file upload rights.", "creation_timestamp": "2026-08-22T00:00:08.697164Z"} https://vulnerability.circl.lu/sighting/546f53c8-a7fd-4c74-9a50-69285e17e9b8/export Sat, 22 Aug 2026 00:00:08 +0000 https://vulnerability.circl.lu/sighting/3824fbaa-1f71-4d0c-a124-d28ce24f7769/export {"uuid": "3824fbaa-1f71-4d0c-a124-d28ce24f7769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://t.me/pphm_HackerNews/2622", "content": "\ud83d\udd34 WordPress 7.0.4 Patches Remote Code Execution Vulnerability\n\nWordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely.\n\nTracked as CVE-2026-65640 (CVSS score of 8.8), the security defect can be exploited by attackers with Author-level user or higher permissions via malicious Postscript file uploads.\n\nAccording to WordPress\u2019 advisory, the issue affects only installations that use Imagick and Ghostscript, as it was discovered in Ghostscript\u2019s handling of certain embedded files. Successful exploitation requires that an attacker has file upload rights.", "creation_timestamp": "2026-08-21T23:00:05.818105Z"} {"uuid": "3824fbaa-1f71-4d0c-a124-d28ce24f7769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://t.me/pphm_HackerNews/2622", "content": "\ud83d\udd34 WordPress 7.0.4 Patches Remote Code Execution Vulnerability\n\nWordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely.\n\nTracked as CVE-2026-65640 (CVSS score of 8.8), the security defect can be exploited by attackers with Author-level user or higher permissions via malicious Postscript file uploads.\n\nAccording to WordPress\u2019 advisory, the issue affects only installations that use Imagick and Ghostscript, as it was discovered in Ghostscript\u2019s handling of certain embedded files. Successful exploitation requires that an attacker has file upload rights.", "creation_timestamp": "2026-08-21T23:00:05.818105Z"} https://vulnerability.circl.lu/sighting/3824fbaa-1f71-4d0c-a124-d28ce24f7769/export Fri, 21 Aug 2026 23:00:05 +0000 https://vulnerability.circl.lu/sighting/6a458a91-5bfe-4691-9a8c-e89ec6bb6c11/export {"uuid": "6a458a91-5bfe-4691-9a8c-e89ec6bb6c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtcr4uqurc2n", "content": "WordPress\u3001\u6295\u7a3f\u8005\u6a29\u9650\u4ee5\u4e0a\u3067RCE\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027\u3092\u4fee\u6b63-CVE-2026-65640 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews\n#\u8106\u5f31\u6027", "creation_timestamp": "2026-08-17T22:34:27.313670Z"} {"uuid": "6a458a91-5bfe-4691-9a8c-e89ec6bb6c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtcr4uqurc2n", "content": "WordPress\u3001\u6295\u7a3f\u8005\u6a29\u9650\u4ee5\u4e0a\u3067RCE\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027\u3092\u4fee\u6b63-CVE-2026-65640 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews\n#\u8106\u5f31\u6027", "creation_timestamp": "2026-08-17T22:34:27.313670Z"} https://vulnerability.circl.lu/sighting/6a458a91-5bfe-4691-9a8c-e89ec6bb6c11/export Mon, 17 Aug 2026 22:34:27 +0000 https://vulnerability.circl.lu/sighting/3532d771-59fa-4770-9a91-50e5cc6e1260/export {"uuid": "3532d771-59fa-4770-9a91-50e5cc6e1260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mt757q4oxq2c", "content": "\ud83d\udce2 Vuln\u00e9rabilit\u00e9 critique d'ex\u00e9cution de code \u00e0 distance dans WordPress (CVE-2026-65640)\n\nLe CERT-FR a publi\u00e9 le 13 ao\u00fbt 2026 l'avis CERTFR-2026-AVI-1018 signalant une vuln\u00e9rabilit\u00e9 dans WordPress, bas\u00e9 sur le bulletin de s\u00e9curit\u00e9\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#WordPress #CERTFR #Cyberveille", "creation_timestamp": "2026-08-16T12:00:06.994136Z"} {"uuid": "3532d771-59fa-4770-9a91-50e5cc6e1260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mt757q4oxq2c", "content": "\ud83d\udce2 Vuln\u00e9rabilit\u00e9 critique d'ex\u00e9cution de code \u00e0 distance dans WordPress (CVE-2026-65640)\n\nLe CERT-FR a publi\u00e9 le 13 ao\u00fbt 2026 l'avis CERTFR-2026-AVI-1018 signalant une vuln\u00e9rabilit\u00e9 dans WordPress, bas\u00e9 sur le bulletin de s\u00e9curit\u00e9\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#WordPress #CERTFR #Cyberveille", "creation_timestamp": "2026-08-16T12:00:06.994136Z"} https://vulnerability.circl.lu/sighting/3532d771-59fa-4770-9a91-50e5cc6e1260/export Sun, 16 Aug 2026 12:00:06 +0000 https://vulnerability.circl.lu/sighting/fd429c18-8300-4cb4-8e6b-6ef2dee492c9/export {"uuid": "fd429c18-8300-4cb4-8e6b-6ef2dee492c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "published-proof-of-concept", "source": "Telegram/xINMrV1P3uzkQaEp3YbshoNNnD8RshvL3z1xc4hsDELyb0o", "content": "", "creation_timestamp": "2026-08-16T00:00:37.927022Z"} {"uuid": "fd429c18-8300-4cb4-8e6b-6ef2dee492c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "published-proof-of-concept", "source": "Telegram/xINMrV1P3uzkQaEp3YbshoNNnD8RshvL3z1xc4hsDELyb0o", "content": "", "creation_timestamp": "2026-08-16T00:00:37.927022Z"} https://vulnerability.circl.lu/sighting/fd429c18-8300-4cb4-8e6b-6ef2dee492c9/export Sun, 16 Aug 2026 00:00:37 +0000 https://vulnerability.circl.lu/sighting/25330474-d213-48f8-8e44-7c8662bf27bb/export {"uuid": "25330474-d213-48f8-8e44-7c8662bf27bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "Telegram/xINMrV1P3uzkQaEp3YbshoNNnD8RshvL3z1xc4hsDELyb0o", "content": "", "creation_timestamp": "2026-08-15T08:00:06.131089Z"} {"uuid": "25330474-d213-48f8-8e44-7c8662bf27bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "Telegram/xINMrV1P3uzkQaEp3YbshoNNnD8RshvL3z1xc4hsDELyb0o", "content": "", "creation_timestamp": "2026-08-15T08:00:06.131089Z"} https://vulnerability.circl.lu/sighting/25330474-d213-48f8-8e44-7c8662bf27bb/export Sat, 15 Aug 2026 08:00:06 +0000 https://vulnerability.circl.lu/sighting/3c5b6e89-9098-4d80-9be2-884051d37245/export {"uuid": "3c5b6e89-9098-4d80-9be2-884051d37245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2bnwnk6c2l", "content": "WordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:20.172672Z"} {"uuid": "3c5b6e89-9098-4d80-9be2-884051d37245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2bnwnk6c2l", "content": "WordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:20.172672Z"} https://vulnerability.circl.lu/sighting/3c5b6e89-9098-4d80-9be2-884051d37245/export Fri, 14 Aug 2026 13:36:20 +0000 https://vulnerability.circl.lu/sighting/732bb31a-bffe-4667-b37b-5e1be1832b24/export {"uuid": "732bb31a-bffe-4667-b37b-5e1be1832b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094124673780642", "content": "\ud83d\udcf0 WordPress patches critical RCE flaw (CVE-2026-65640) for author-level users\nWordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-wordpress-allows-author-level-users-to-take-over-sites/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:06.942319Z"} {"uuid": "732bb31a-bffe-4667-b37b-5e1be1832b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094124673780642", "content": "\ud83d\udcf0 WordPress patches critical RCE flaw (CVE-2026-65640) for author-level users\nWordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-wordpress-allows-author-level-users-to-take-over-sites/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:06.942319Z"} https://vulnerability.circl.lu/sighting/732bb31a-bffe-4667-b37b-5e1be1832b24/export Fri, 14 Aug 2026 13:36:06 +0000 https://vulnerability.circl.lu/sighting/387c1a2a-fd8f-406c-98cb-4714af44ccd6/export {"uuid": "387c1a2a-fd8f-406c-98cb-4714af44ccd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mszxaxwzcq2f", "content": "\ud83d\udce2 WordPress 7.0.4 corrige une RCE via fichiers PostScript malveillants (CVE-2026-65640)\n\nCet article rapporte la publication par WordPress d'un correctif pour une vuln\u00e9rabilit\u00e9 d'ex\u00e9cution de code \u00e0 distance (RCE) de haute s\u00e9v\u00e9rit\u00e9\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#RCE #WordPress #Cyberveille", "creation_timestamp": "2026-08-14T10:30:07.609872Z"} {"uuid": "387c1a2a-fd8f-406c-98cb-4714af44ccd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mszxaxwzcq2f", "content": "\ud83d\udce2 WordPress 7.0.4 corrige une RCE via fichiers PostScript malveillants (CVE-2026-65640)\n\nCet article rapporte la publication par WordPress d'un correctif pour une vuln\u00e9rabilit\u00e9 d'ex\u00e9cution de code \u00e0 distance (RCE) de haute s\u00e9v\u00e9rit\u00e9\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#RCE #WordPress #Cyberveille", "creation_timestamp": "2026-08-14T10:30:07.609872Z"} https://vulnerability.circl.lu/sighting/387c1a2a-fd8f-406c-98cb-4714af44ccd6/export Fri, 14 Aug 2026 10:30:07 +0000