{"vulnerability": "CVE-2026-65640", "sightings": [{"uuid": "3532d771-59fa-4770-9a91-50e5cc6e1260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mt757q4oxq2c", "content": "\ud83d\udce2 Vuln\u00e9rabilit\u00e9 critique d'ex\u00e9cution de code \u00e0 distance dans WordPress (CVE-2026-65640)\n\nLe CERT-FR a publi\u00e9 le 13 ao\u00fbt 2026 l'avis CERTFR-2026-AVI-1018 signalant une vuln\u00e9rabilit\u00e9 dans WordPress, bas\u00e9 sur le bulletin de s\u00e9curit\u00e9\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#WordPress #CERTFR #Cyberveille", "creation_timestamp": "2026-08-16T12:00:06.994136Z"}, {"uuid": "387c1a2a-fd8f-406c-98cb-4714af44ccd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mszxaxwzcq2f", "content": "\ud83d\udce2 WordPress 7.0.4 corrige une RCE via fichiers PostScript malveillants (CVE-2026-65640)\n\nCet article rapporte la publication par WordPress d'un correctif pour une vuln\u00e9rabilit\u00e9 d'ex\u00e9cution de code \u00e0 distance (RCE) de haute s\u00e9v\u00e9rit\u00e9\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#RCE #WordPress #Cyberveille", "creation_timestamp": "2026-08-14T10:30:07.609872Z"}, {"uuid": "732bb31a-bffe-4667-b37b-5e1be1832b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094124673780642", "content": "\ud83d\udcf0 WordPress patches critical RCE flaw (CVE-2026-65640) for author-level users\nWordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-wordpress-allows-author-level-users-to-take-over-sites/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:06.942319Z"}, {"uuid": "3c5b6e89-9098-4d80-9be2-884051d37245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2bnwnk6c2l", "content": "WordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:20.172672Z"}, {"uuid": "3824fbaa-1f71-4d0c-a124-d28ce24f7769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://t.me/pphm_HackerNews/2622", "content": "\ud83d\udd34 WordPress 7.0.4 Patches Remote Code Execution Vulnerability\n\nWordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely.\n\nTracked as CVE-2026-65640 (CVSS score of 8.8), the security defect can be exploited by attackers with Author-level user or higher permissions via malicious Postscript file uploads.\n\nAccording to WordPress\u2019 advisory, the issue affects only installations that use Imagick and Ghostscript, as it was discovered in Ghostscript\u2019s handling of certain embedded files. Successful exploitation requires that an attacker has file upload rights.", "creation_timestamp": "2026-08-21T23:00:05.818105Z"}, {"uuid": "546f53c8-a7fd-4c74-9a50-69285e17e9b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://t.me/pphm_HackerNews/2622", "content": "\ud83d\udd34 WordPress 7.0.4 Patches Remote Code Execution Vulnerability\n\nWordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely.\n\nTracked as CVE-2026-65640 (CVSS score of 8.8), the security defect can be exploited by attackers with Author-level user or higher permissions via malicious Postscript file uploads.\n\nAccording to WordPress\u2019 advisory, the issue affects only installations that use Imagick and Ghostscript, as it was discovered in Ghostscript\u2019s handling of certain embedded files. Successful exploitation requires that an attacker has file upload rights.", "creation_timestamp": "2026-08-22T00:00:08.697164Z"}, {"uuid": "518e6672-6df9-4229-abf1-1cc45b79099e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3msx3zqsao22s", "content": "#WordPress: Yet another AI-discovered(@pwn_ai) Critical WordPress #RCE #Vulnerability CVE-2026-65640 Allows Authors to Execute Code via Malicious PNG File (via Imagemagick). \nPatched WordPress version 7.0.4 is now available, older versions backported:\n\ud83d\udc47\ncybersecuritynews.com/wordpress-im...", "creation_timestamp": "2026-08-13T07:17:35.845697Z"}, {"uuid": "ad2a99ec-8fd1-4e76-a77c-68604517702c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msx4zmq35f27", "content": "WordPress 7.0.4 patches CVE-2026-65640, an Author-level remote code execution bug on sites using Imagick and Ghostscript. Update now.\n\n#WordPress #CVE202665640 #RCE #Imagick #Ghostscript #WebSecurity #Cybersecurity", "creation_timestamp": "2026-08-13T07:35:24.563111Z"}, {"uuid": "593504ba-c30d-42d9-9b7b-267a5f29be0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65640", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3msx4tcaayc27", "content": "WordPress 7.0.4 Fixes Critical Imagick RCE: How a Malicious PNG Could Become Server-Side Code\u00a0Execution\n\nWordPress 7.0.4 fixes CVE-2026-65640, an authenticated RCE affecting sites using Imagick and Ghostscript. Learn how\u2026\n\nhttps://thecybersecguru.com/news/wordpress-7-0-4-cve-2026-65640-imagick-rce/", "creation_timestamp": "2026-08-13T07:31:52.179038Z"}, {"uuid": "25330474-d213-48f8-8e44-7c8662bf27bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "Telegram/xINMrV1P3uzkQaEp3YbshoNNnD8RshvL3z1xc4hsDELyb0o", "content": "", "creation_timestamp": "2026-08-15T08:00:06.131089Z"}, {"uuid": "6a458a91-5bfe-4691-9a8c-e89ec6bb6c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtcr4uqurc2n", "content": "WordPress\u3001\u6295\u7a3f\u8005\u6a29\u9650\u4ee5\u4e0a\u3067RCE\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027\u3092\u4fee\u6b63-CVE-2026-65640 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews\n#\u8106\u5f31\u6027", "creation_timestamp": "2026-08-17T22:34:27.313670Z"}, {"uuid": "264402f4-6c8d-49c8-92d8-e44aa18af29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/raul.mastodon.in4matics.cat.ap.brid.gy/post/3msxk5qzizrw2", "content": "\ud83d\uddbc\ufe0f RCE a WordPress via PNG maliciosos. CVE-2026-65640, fix a 7.0.4.\n\nAtacant amb rol Autor puja `EPS:innocent.png` o un PNG amb PostScript ocult. `Imagick::load()` confiava en l'extensi\u00f3; ImageMagick llegeix el contingut real \u2192 Ghostscript executa. XML-RPC i portades MP3 saltaven la validaci\u00f3 [\u2026]", "creation_timestamp": "2026-08-13T11:30:28.978077Z"}, {"uuid": "143efe55-4f26-46cf-8428-a104894cd0b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/in4matics.cat/post/3msxk62a75u2h", "content": "\ud83d\uddbc\ufe0f RCE a WordPress via PNG maliciosos. CVE-2026-65640, fix a 7.0.4. Atacant amb rol Autor puja `EPS:innocent.png` o un PNG amb PostScript ocult. `Imagick::load()` confiava en l'extensi\u00f3; ImageMagick llegeix el contingut ...", "creation_timestamp": "2026-08-13T11:30:30.904328Z"}, {"uuid": "83b53e39-34fd-4fbd-8303-04f80b22c532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3msxptykh7y26", "content": "WordPress released patches for CVE-2026-65640, a high-severity authenticated remote code execution flaw exploitable via PostScript-in-image uploads when Imagick and Ghostscript are enabled.\n", "creation_timestamp": "2026-08-13T13:12:16.527382Z"}, {"uuid": "8d001b51-effd-4ea6-9c9f-525d55ff627c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxsjkvvxf2d", "content": "\ud83d\udd17 CVE : CVE-2026-65640", "creation_timestamp": "2026-08-13T14:00:07.407108Z"}, {"uuid": "f87f3302-fb06-4864-9659-3f4c378b8874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msxtt3tlok25", "content": "WordPress\u304c7.0.4\u3092\u516c\u958b\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nWordPress\u306f\u6c34\u66dc\u65e5\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u6df1\u523b\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u767a\u8868\u3057\u307e\u3057\u305f\u3002 CVE-2026-65640(CVSS\u30b9\u30b3\u30a28.8)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001\u60aa\u610f\u306e\u3042\u308bPostscript\u30d5\u30a1\u30a4\u30eb\u306e\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3092\u901a\u3058\u3066\u3001Author\u6a29\u9650\u4ee5\u4e0a\u3092\u6301\u3064", "creation_timestamp": "2026-08-13T14:23:21.094173Z"}, {"uuid": "197db730-8f8c-4d3f-ad0d-32f84d59ebc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/117088692616270994", "content": "\u2026et encore une vuln\u00e9rabilit\u00e9 critique dans #WordPress, trouv\u00e9e une nouvelle fois par pwn.ai, qui a n\u00e9cessit\u00e9 la publication en urgence de la mise \u00e0 jour 7.0.4\nLa CVE-2026-65640 est une RCE assez int\u00e9ressante c\u00f4t\u00e9 traitement d\u2019images. (ImageMagick)\nUn utilisateur avec le r\u00f4le Author peut envoyer un fichier nomm\u00e9 comme une innocente image .png, alors que son contenu est en r\u00e9alit\u00e9 du PostScript/EPS. WordPress se fiait trop \u00e0 l\u2019extension ; ImageMagick, lui, regarde le contenu et peut transmettre le fichier \u00e0 Ghostscript\u2026 avec \u00e0 la cl\u00e9 une ex\u00e9cution de code.\nCe n\u2019est donc pas une RCE pr\u00e9-auth : il faut d\u00e9j\u00e0 disposer d\u2019un compte Author. Mais sur un site multi-auteurs, communautaire ou avec des comptes peu ma\u00eetris\u00e9s, le risque devient nettement plus concret. \ud83d\udc47 https://wordpress.org/news/2026/08/wordpress-7-0-4-release/\u2b07\ufe0f https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-8vr3-7mxf-gx8w\n#CyberVeille", "creation_timestamp": "2026-08-13T14:34:22.756706Z"}, {"uuid": "adeb9864-6792-4f0a-8778-788990f3c0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3msy24cmzpe2h", "content": "WordPress 7.0.4 corrige RCE v\u00eda PostScript; afecta instalaciones con Imagick\n\nWordPress lanz\u00f3 7.0.4 para parchear CVE-2026-65640 (CVSS 8.8): un atacante con permisos\u2026\n\nhttps://mentehackers.com/wordpress-patch-rce-postscript-imagick-893d6bc1\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-13T16:15:54.341860Z"}, {"uuid": "fa666935-6ed8-4296-a51d-b537685e0079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msy5gphya62y", "content": "WordPress 7.0.4 patches CVE-2026-65640, an 8.8 flaw that could let Author-level attackers trigger remote code execution via crafted PostScript uploads on sites using Imagick and Ghostscript. #WordPress #CVE-2026-65640 #Imagick", "creation_timestamp": "2026-08-13T17:15:22.667941Z"}, {"uuid": "dd0ca9c0-0d68-4794-852e-139f030c54b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msy7ox6qqc2b", "content": "WordPress 704 Security Update: A Claimed CVE-2026-65640 Flaw Puts Author-Level Uploads Under the Microscope +\u00a0Video\n\nA New WordPress Security Warning Is Raising Fresh Concerns WordPress powers a huge portion of the modern web, which makes every serious vulnerability in its ecosystem worth watching\u2026", "creation_timestamp": "2026-08-13T17:55:47.556344Z"}, {"uuid": "fd429c18-8300-4cb4-8e6b-6ef2dee492c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "published-proof-of-concept", "source": "Telegram/xINMrV1P3uzkQaEp3YbshoNNnD8RshvL3z1xc4hsDELyb0o", "content": "", "creation_timestamp": "2026-08-16T00:00:37.927022Z"}, {"uuid": "6e5ca7c6-fcd8-4620-bb45-a20fbad9e7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3msz6o4fymm23", "content": "WordPress 7.0.4: parcha la vulnerabilidad RCE CVE-2026-65640\n\n#cve202665640 #rcewordpress #imagickghostscript #wordpress704 #ejecucionremotadecodigo", "creation_timestamp": "2026-08-14T03:10:04.732850Z"}, {"uuid": "bc2d0748-9ac7-44f9-b765-63f24093a59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mu3adglncq2g", "content": "WordPress patched CVE-2026-65640, an authenticated RCE rated 8.8. Exploitation requires upload permissions plus Imagick and Ghostscript; Drupal is not identified as affected.\n\nhttps://bit.ly/3UCY1qj \n\n#WordPress #Security #Drupal", "creation_timestamp": "2026-08-27T16:10:27.061595Z"}]}