{"id":"CVE-2026-116145","aliases":[],"cve":{"records":[{"id":"CVE-2026-116145","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-25T12:21:59.039Z","published":"2026-10-25T13:19:55.780Z","modified":"2026-10-29T19:52:42.831Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-10-25T13:19:55.780Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T19:52:42.831Z"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4wfv-467j-fqh9","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-58-and-7-x-before-7.1.2-32-security-policy-bypass-via-incomplete-fix","tags":["third-party-advisory"],"source":"VulnCheck"}],"weaknesses":[{"id":"CWE-693","description":"Protection Mechanism Failure","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0-0","versionEndExcluding":"7.1.2-32"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndExcluding":"6.9.13-58"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T19:52:32.372780Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass reported in GHSA-jjp4-3fwf-393j. An attacker able to supply input to ImageMagick can evade configured security policy restrictions, allowing operations the policy was intended to block.","score":3.9,"severity":"low","published":"2026-10-25T13:19:55.780Z","modified":"2026-10-29T19:52:42.831Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"ImageMagick","name":"ImageMagick","platforms":[],"versions":[{"version":"7.0.0-0","status":"affected","lessThan":"7.1.2-32","versionType":"custom"},{"version":"7.1.2-32","status":"unaffected","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-116145"},{"vendor":"ImageMagick","name":"ImageMagick","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"6.9.13-58","versionType":"custom"},{"version":"6.9.13-58","status":"unaffected","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-116145"}],"remediation":[],"references":["https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4wfv-467j-fqh9","https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-58-and-7-x-before-7.1.2-32-security-policy-bypass-via-incomplete-fix"],"sources":[{"name":"CVE","id":"CVE-2026-116145","modified":"2026-10-29T19:52:42.831Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-116145"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","score":1.8},{"source":"VulnCheck","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","score":3.9}],"sourceAffected":[],"observedAt":"2026-10-29T20:45:49.848Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T16:20:31.233Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T07:15:32.802Z","attemptedAt":"2026-10-30T07:15:32.802Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-30T07:15:32.046Z","attemptedAt":"2026-10-30T07:15:32.046Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T07:15:32.045Z","attemptedAt":"2026-10-30T07:15:32.045Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-30T07:15:31.871Z","attemptedAt":"2026-10-30T07:15:31.871Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-116145","url":"https://www.first.org/epss/","probability":0.00112,"percentile":0.01339,"date":"2026-10-29","checkedAt":"2026-10-30T07:15:31.871Z"},{"source":"ENISA EUVD","id":"EUVD-2026-109406","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109406","modified":"Oct 29, 2026, 7:52:42 PM","score":1.8,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","checkedAt":"2026-10-30T07:15:32.045Z"},{"source":"GitHub Advisory Database","id":"GHSA-225f-w5rc-j756","url":"https://github.com/advisories/GHSA-225f-w5rc-j756","modified":"2026-10-25T15:32:18Z","score":3.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","checkedAt":"2026-10-30T07:15:32.046Z"},{"source":"NVD","id":"CVE-2026-116145","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116145","modified":"2026-10-29T20:17:27.370","score":1.8,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-10-30T07:15:32.802Z"},{"source":"NVD","id":"CVE-2026-116145","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116145","modified":"2026-10-29T20:17:27.370","score":3.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","checkedAt":"2026-10-30T07:15:32.802Z"}],"aiSummary":{"text":"ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 has a security policy bypass weakness, allowing an attacker to evade configured restrictions. The attacker must be able to supply input to ImageMagick. The impact is that operations blocked by the policy can be performed.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:45:44.159Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-116145"}]}}