P5 Verified
ImageMagick before 7.1.2-32 and 6.9.13-57 Security Policy Bypass via policy.xml DOCTYPE
CVE-2026-105083. EPSS 0.00117 (percentile 0.01519), scored 2026-10-03. Fixed version: ad98b244c995d2e3051757fa3b7855f45b550d24. Fixed version: 402ebc5353e569234908962cbdf451531ff66a57. Fixed version: da6022b2efe6cce8a2fd8f9e51188a45a3b9d558.
- CVE / CWE
- CVE-2026-105083 /
- Vendor / product
- Unavailable / Unavailable
- Severity
- 0.0
- CVSS
- Unavailable · CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N · osv
- EPSS
- 0.00117 · percentile 0.01519 · 2026-10-03
- KEV
- no · added unavailable · due unavailable · ransomware use unavailable
- Exploit signals
- Signal evidence
Affected products
- Product unavailable · Fixed version: ad98b244c995d2e3051757fa3b7855f45b550d24
- Product unavailable · Fixed version: 402ebc5353e569234908962cbdf451531ff66a57
- Product unavailable · Fixed version: da6022b2efe6cce8a2fd8f9e51188a45a3b9d558
Provenance
- OSV.dev · Source record · observed 2026-10-04 08:10:59.885464+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-105083.html