{"uuid": "264402f4-6c8d-49c8-92d8-e44aa18af29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65640", "type": "seen", "source": "https://bsky.app/profile/raul.mastodon.in4matics.cat.ap.brid.gy/post/3msxk5qzizrw2", "content": "\ud83d\uddbc\ufe0f RCE a WordPress via PNG maliciosos. CVE-2026-65640, fix a 7.0.4.\n\nAtacant amb rol Autor puja `EPS:innocent.png` o un PNG amb PostScript ocult. `Imagick::load()` confiava en l'extensi\u00f3; ImageMagick llegeix el contingut real \u2192 Ghostscript executa. XML-RPC i portades MP3 saltaven la validaci\u00f3 [\u2026]", "creation_timestamp": "2026-08-13T11:30:28.978077Z"}