CVE-2026-106579
Medium · 6.2CVSS
6.2
EPSS
0.3%
Published
Oct 7, 2026
CISA due date
—
The record
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-16102 A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an… CWE-551
- CVE-2026-15573 A flaw was found in Keycloak's Authorization Services. CWE-551
- CVE-2026-13676 fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN)… CWE-551
- CVE-2026-57920 Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass… CWE-551
- CVE-2026-50559 Quarkus is a Java framework for building cloud-native applications. CWE-551
- CVE-2026-44574 Next.js is a React framework for building full-stack web applications. CWE-551
- CVE-2026-44575 Next.js is a React framework for building full-stack web applications. CWE-551
- CVE-2026-44573 Next.js is a React framework for building full-stack web applications. CWE-551