CVE-2026-49219EPSS p5.8%

CVE-2026-49219CVE-2026-49219

imagemagick / imagemagick

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched in versions 6.9.13-48 and 7.1.2-24.

Scoring

CVSS 5.5 ()
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS0.17% probability of exploitation · percentile 5.8% · 2026-10-05T12:00:23Z
Last modified2026-07-23

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-49218
CVE
CVE-2026-42326
CVE
CVE-2026-48733
CVE
CVE-2026-45358
CVE
CVE-2025-55298
CVE
CVE-2026-26284
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.