{"id":"CVE-2026-56379","aliases":[],"cve":{"records":[{"id":"CVE-2026-56379","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-06-21T02:05:47.495Z","published":"2026-06-23T12:13:05.492Z","modified":"2026-10-29T21:15:58.066Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-10-29T21:15:58.066Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-06-23T13:58:13.304Z"},{"name":"redhat-SADP","role":"ADP","organizationId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","modified":"2026-07-15T00:42:36.269Z"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xpg8-7m6m-jf56","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/imagemagick-command-injection-via-svg-decoder","tags":["third-party-advisory"],"source":"VulnCheck"},{"url":"https://access.redhat.com/security/cve/CVE-2026-56379","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat-SADP"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491700","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat-SADP"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56379.json","tags":["x_sadp-csaf-vex"],"source":"redhat-SADP"},{"url":"https://access.redhat.com/errata/RHSA-2026:32961","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat-SADP"}],"weaknesses":[{"id":"CWE-116","description":"Improper Encoding or Escaping of Output","source":"VulnCheck"},{"id":"CWE-78","description":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","source":"redhat-SADP"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1.2-15","versionStartIncluding":"7.0.0"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*","versionEndExcluding":"6.9.13-40"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-06-23T13:58:05.952386Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"ImageMagick - Command Injection via SVG Decoder","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.","score":9.2,"severity":"critical","published":"2026-06-23T12:13:05.492Z","modified":"2026-10-29T21:15:58.066Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"ImageMagick","name":"ImageMagick","platforms":[],"versions":[{"version":"7.0.0","status":"affected","lessThan":"7.1.2-15","versionType":"semver"},{"version":"7.1.2-15","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-56379"},{"vendor":"ImageMagick","name":"ImageMagick","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"6.9.13-40","versionType":"semver"},{"version":"6.9.13-40","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-56379"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","platforms":[],"versions":[{"version":"0:6.9.10.68-17.el7_9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:7"],"source":"redhat-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2026-56379"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"unknown","cpes":["cpe:/o:redhat:enterprise_linux:6"],"source":"redhat-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2026-56379"}],"remediation":[{"text":"RHSA-2026:32961: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)","source":"redhat-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2026-56379"},{"text":"Restrict ImageMagick processing capabilities via policy.xml, disabling the SVG coder and restricting delegates to prevent injection escalation to OS command execution. Enforce mandatory access control (SELinux/AppArmor) combined with seccomp syscall filtering to block execve. For systemd services, enable NoNewPrivileges, ProtectSystem=strict, ProtectHome=true, and PrivateDevices=true.","source":"redhat-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2026-56379"}],"references":["https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xpg8-7m6m-jf56","https://www.vulncheck.com/advisories/imagemagick-command-injection-via-svg-decoder","https://access.redhat.com/security/cve/CVE-2026-56379","https://bugzilla.redhat.com/show_bug.cgi?id=2491700","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56379.json","https://access.redhat.com/errata/RHSA-2026:32961"],"sources":[{"name":"CVE","id":"CVE-2026-56379","modified":"2026-10-29T21:15:58.066Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-56379"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.2},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.1},{"source":"redhat-SADP","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.1}],"sourceAffected":[],"observedAt":"2026-10-29T21:29:15.640Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T09:10:30.844Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-29T23:40:32.596Z","attemptedAt":"2026-10-29T23:40:32.596Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-29T23:40:32.420Z","attemptedAt":"2026-10-29T23:40:32.420Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T23:40:32.650Z","attemptedAt":"2026-10-29T23:40:32.650Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-29T23:40:32.355Z","attemptedAt":"2026-10-29T23:40:32.355Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-56379","url":"https://www.first.org/epss/","probability":0.01643,"percentile":0.76356,"date":"2026-10-29","checkedAt":"2026-10-29T23:40:32.355Z"},{"source":"GitHub Advisory Database","id":"GHSA-xpg8-7m6m-jf56","url":"https://github.com/advisories/GHSA-xpg8-7m6m-jf56","modified":"2026-09-24T20:05:07Z","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N","checkedAt":"2026-10-29T23:40:32.420Z"},{"source":"NVD","id":"CVE-2026-56379","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56379","modified":"2026-10-29T21:17:26.137","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-10-29T23:40:32.596Z"},{"source":"NVD","id":"CVE-2026-56379","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56379","modified":"2026-10-29T21:17:26.137","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-10-29T23:40:32.596Z"},{"source":"NVD","id":"CVE-2026-56379","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56379","modified":"2026-10-29T21:17:26.137","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","checkedAt":"2026-10-29T23:40:32.596Z"},{"source":"NVD","id":"CVE-2026-56379","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56379","modified":"2026-10-29T21:17:26.137","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-10-29T23:40:32.596Z"},{"source":"ENISA EUVD","id":"EUVD-2026-38441","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-38441","modified":"Oct 29, 2026, 9:15:58 PM","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","checkedAt":"2026-10-29T23:40:32.650Z"}],"aiSummary":{"text":"ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands. The impact is uncertain.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:31:59.067Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-56379"}]}}