Lucene search
+L

32 matches found

OSV
OSV
added 2026/07/30 4:2 p.m.6 views

JLSEC-2026-1064 ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and...

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process...

5.3CVSS5.9AI score0.00246EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/30 4:2 p.m.9 views

JLSEC-2026-1065 ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability...

ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy...

4.8CVSS5.9AI score0.00124EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/24 2:21 p.m.4 views

GHSA-VGHG-5JRG-2398 ImageMagick: Policy Bypass in script operation due to missing checks

The -script operation is missing policy checks and that could result in both reading from paths disallowed by the security policy...

3.3CVSS5.8AI score0.00124EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/07/24 2:21 p.m.13 views

ImageMagick: Policy Bypass in script operation due to missing checks

The -script operation is missing policy checks and that could result in both reading from paths disallowed by the security policy...

5.8AI score
SaveExploits0References3Affected Software17
OSV
OSV
added 2026/07/24 2:20 p.m.8 views

GHSA-V3J6-27VC-7PW2 ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check

Due to a missing check in the APNG encoder and external delegates it is possibly to bypass the policy and write to a disallowed path...

3.3CVSS5.9AI score0.00246EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/07/24 2:6 p.m.12 views

ImageMagick: Policy Bypass in concatenate operation due to missing checks

The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References4Affected Software17
EUVD
EUVD
added 2026/07/24 2:6 p.m.18 views

EUVD-2026-41112

ImageMagick: Policy Bypass in concatenate operation due to missing checks...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/15 11:25 a.m.8 views

CVE-2026-61859 ImageMagick before 7.1.2-26 Policy Bypass via script operation

ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy...

4.8CVSS6.1AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/07/15 11:25 a.m.14 views

CVE-2026-61859 ImageMagick before 7.1.2-26 Policy Bypass via script operation

ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy...

4.8CVSS6.1AI score0.00124EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/12 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-61858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can...

5.3CVSS5.9AI score0.00246EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/07/11 7:35 p.m.12 views

CVE-2026-61858

A flaw was found in ImageMagick. This vulnerability allows attackers to bypass configured policy restrictions through the APNG Animated Portable Network Graphics encoding process. By exploiting missing validation checks in the APNG encoder and external delegates, an attacker can write files to...

5.3CVSS6AI score0.00246EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/07/11 2:29 p.m.14 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack through the CopyDelegateFile path in the VIDEO/APNG delegate code. An attacker can write output to a disallowed path by supplying a delegate-driven image write that copies a generated file to a destination the policy shou...

5.3CVSS6.2AI score0.00246EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/11 2:16 p.m.10 views

DEBIAN-CVE-2026-61858

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process...

5.3CVSS6.1AI score0.00246EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/07/11 2:16 p.m.14 views

CVE-2026-61858

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process...

5.3CVSS6.1AI score0.00246EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/11 2:16 p.m.10 views

UBUNTU-CVE-2026-61858

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process...

5.3CVSS6.1AI score0.00246EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/11 1:1 p.m.14 views

EUVD-2026-43187

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process...

4.8CVSS6.1AI score0.00246EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/11 1:1 p.m.36 views

CVE-2026-61858

CVE-2026-61858 concerns ImageMagick prior to 7.1.2-26, where a policy bypass vulnerability exists in the APNG encoder and external delegates due to missing validation checks. Attackers can bypass policy restrictions during APNG encoding and write files to disallowed paths. The provided documents ...

5.3CVSS6.1AI score0.00246EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/11 1:1 p.m.7 views

CVE-2026-61858 ImageMagick before 7.1.2-26 Policy Bypass via APNG encoder

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process...

4.8CVSS6.1AI score0.00246EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/11 1:1 p.m.56 views

CVE-2026-61858 ImageMagick before 7.1.2-26 Policy Bypass via APNG encoder

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process...

4.8CVSS0.00246EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/11 1:1 p.m.13 views

CVE-2026-61858 ImageMagick before 7.1.2-26 Policy Bypass via APNG encoder

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process...

4.8CVSS6.1AI score
SaveExploits0References4
Rows per page
Query Builder