WordPress 7.0.4 Released to Patch High-Severity RCE Vulnerability CVE-2026-65640
The WordPress development team has released WordPress 7.0.4 to address a remote code execution vulnerability that affects specific server environments. The update is being distributed as a security release, and site owners are strongly encouraged to apply it without delay.
The flaw, identified as CVE-2026-65640, was reported by an external security vendor. It allows an authenticated user with Author privileges or higher to execute arbitrary code on the server under certain conditions. Exploitation requires the presence of both the Imagick and Ghostscript image-processing tools, which are commonly used for handling uploaded media files.
According to the advisory, an attacker can upload a malicious PostScript file that is processed by these components, resulting in remote code execution. The vulnerability has been assigned a CVSS v3.0 base score of 8.8 and is rated High severity.
WordPress 7.0.4 can be installed manually from the administration dashboard. Sites configured for automatic background updates will receive the patch progressively. The team is also preparing backported fixes for the older 4.7 branch, which are expected to be released in the near future.
Related articles
NVD Disruptions Force Security Teams to Diversify Vulnerability Intelligence Sources
The vulnerability management ecosystem has undergone major shifts over the past two years, undermining reliance on a single authoritative database. NVD, long considered the central enrichment layer for CVE records, has experienced significant operational problems that affect timeliness and completeness of data. Russian organizations are increasingly turning to BDU FSTEC as the national vulnerability database that provides official descriptions, remediation guidance, and coverage of domestic software. CVE maintained by MITRE continues to serve as the universal identifier standard, yet it lacks the detailed scoring and product mappings previously supplied by NVD. Vendor security bulletins from Microsoft, Cisco, Astra Group, and Positive Technologies often deliver the earliest and most accurate information. The article explains why a multi-source approach has become essential for comprehensive vulnerability management programs.
HPE Aruba Networking Fabric Composer Affected by 52 Vulnerabilities Including Five Critical Flaws
HPE disclosed a security advisory on September 1, 2026, revealing 52 vulnerabilities in HPE Aruba Networking Fabric Composer. Five of these issues are rated Critical, including authentication bypass flaws that allow remote code execution and privilege escalation. CVE-2026-76657 permits attackers to bypass API authentication and gain administrator rights remotely. CVE-2026-76658 enables unauthenticated command execution as a privileged user via the SSH daemon. Additional critical issues include CVE-2026-19766 for adjacent network host takeover, CVE-2026-73700 for XSS in the web interface, and CVE-2026-73701 for unauthenticated remote code execution under certain conditions. HPE strongly recommends immediate updates across affected components including the OS, SSH, web management, and API layers.
SonicWall SMA 1000 Series Affected by Critical Vulnerabilities with Evidence of Exploitation
SonicWall has disclosed two serious vulnerabilities in its SMA 1000 series remote access appliances. The issues, tracked as CVE-2026-83548 and CVE-2026-83549, affect the SMA 6210, SMA 7210, and SMA 8200v models. CVE-2026-83548 is a server-side request forgery flaw in the WorkPlace interface that permits unauthenticated remote access to otherwise restricted functions. CVE-2026-83549 is an OS command injection vulnerability in the Appliance Management Console that can lead to remote command execution after authentication under certain conditions. Both vulnerabilities received high CVSS scores, with one reaching the maximum of 10.0. The vendor published the advisory on September 1, 2026, and confirmed cases where the flaws appear to have been exploited in the wild.
Dell Expands PowerStore Advisory with Two Additional Critical Vulnerabilities
Dell has updated its security advisory for the Dell PowerStore storage platform, adding two previously unmentioned vulnerabilities to the list of issues addressed by recent patches. The advisory now covers CVE-2026-58566, an authorization bypass flaw that can lead to privilege escalation, and CVE-2026-79687, an authentication bypass in Dell PowerStore SDNAS that allows unauthenticated remote access to the file system. Both vulnerabilities received high CVSSv3.1 base scores of 8.8 and 9.0 respectively. The company also announced availability of updated PowerStoreT OS builds 5.0.0.2-2761110, 4.3.1.2-2771239, and 4.1.0.6-2771237 that remediate the newly listed issues along with fifteen other CVEs. The advisory was first published on August 10, 2026 and received multiple revisions through the end of the month.