Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/02/24 1:27 a.m.24 views

CVE-2026-25966 ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access

ImageMagick is free and open-source software used for editing and manipulating digital images. The shipped "secure" security policy includes a rule intended to prevent reading/writing from standard streams. However, ImageMagick also supports fd: pseudo-filenames e.g., fd:0, fd:1. Prior to version...

5.9CVSS0.00135EPSS
SaveExploits0References1
Rows per page
Query Builder