
Vulnerabilities
Wordfence Argus Finds Critical Ghostscript Flaw Allowing Remote Code Execution
A heap buffer overflow in Ghostscript allows attackers to execute code remotely via crafted PDFs, according to new research from Wordfence.
Everything Threat Times has reported about Wordfence: 4 stories, newest first. Part of our Vulnerabilities coverage.

A heap buffer overflow in Ghostscript allows attackers to execute code remotely via crafted PDFs, according to new research from Wordfence.

Patchstack reports active wild exploitation of CVE-2026-85097, a maximum-severity flaw in Bricksforge allowing unauthenticated remote code execution on WordPress sites.

Wordfence says the web depends on public key encryption, which could fail without a ready replacement, highlighting the need for AI-driven mathematical defenses.

Wordfence Intelligence published its weekly vulnerability digest covering disclosures from September 28 through October 4, 2026, for WordPress administrators.