Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/10/05 11:07 p.m.•10 views

CVE-2026-105764 Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin user could upload SVG files that thumbnail-generation code in server/src/repositories/media.repository.ts passed to libvips. Files that bypassed libvips' native SVG loader fell...

7.7CVSS0.00266EPSS
SaveExploits0References2
Rows per page
Query Builder