CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

[UPDATE] [mittel] ImageMagick: Mehrere Schwachstellen

mediumCVE-2026-25984CVE-2026-56367CVE-2026-56378CVE-2026-56371CVE-2026-56379CVE-2026-56376
Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere nicht näher definierte Angriffe durchzuführen.

CSIRTS triage

What
Multiple vulnerabilities allow an attacker to execute arbitrary program code, bypass security measures, manipulate data, disclose sensitive information, or cause a denial-of-service condition.
Who is affected
Users of ImageMagick are affected.
Urgency
Remediation is medium urgency due to the variety of impacts and potential for exploitation.
Action
Update to the latest version of ImageMagick to mitigate the vulnerabilities.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch ImageMagick

Get an email when a new ImageMagick advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
medium
Published
2026-09-10
Exploitation
Not in CISA KEV at last sync

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0484

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-25984coverage & exploitation statusNVD · CVE.org
CVE-2026-56367coverage & exploitation statusNVD · CVE.org
CVE-2026-56378coverage & exploitation statusNVD · CVE.org
CVE-2026-56371coverage & exploitation statusNVD · CVE.org
CVE-2026-56379coverage & exploitation statusNVD · CVE.org
CVE-2026-56376coverage & exploitation statusNVD · CVE.org
CVE-2026-56368coverage & exploitation statusNVD · CVE.org
CVE-2026-24481coverage & exploitation statusNVD · CVE.org
CVE-2026-24484coverage & exploitation statusNVD · CVE.org
CVE-2026-24485coverage & exploitation statusNVD · CVE.org
CVE-2026-25576coverage & exploitation statusNVD · CVE.org
CVE-2026-25637coverage & exploitation statusNVD · CVE.org
CVE-2026-25638coverage & exploitation statusNVD · CVE.org
CVE-2026-25794coverage & exploitation statusNVD · CVE.org
CVE-2026-25795coverage & exploitation statusNVD · CVE.org
CVE-2026-25796coverage & exploitation statusNVD · CVE.org
CVE-2026-25797coverage & exploitation statusNVD · CVE.org
CVE-2026-25798coverage & exploitation statusNVD · CVE.org
CVE-2026-25799coverage & exploitation statusNVD · CVE.org
CVE-2026-25897coverage & exploitation statusNVD · CVE.org
CVE-2026-25898coverage & exploitation statusNVD · CVE.org
CVE-2026-25965coverage & exploitation statusNVD · CVE.org
CVE-2026-25966coverage & exploitation statusNVD · CVE.org
CVE-2026-25967coverage & exploitation statusNVD · CVE.org
CVE-2026-25968coverage & exploitation statusNVD · CVE.org
CVE-2026-25969coverage & exploitation statusNVD · CVE.org
CVE-2026-25970coverage & exploitation statusNVD · CVE.org
CVE-2026-25971coverage & exploitation statusNVD · CVE.org
CVE-2026-25982coverage & exploitation statusNVD · CVE.org
CVE-2026-25983coverage & exploitation statusNVD · CVE.org
CVE-2026-25985coverage & exploitation statusNVD · CVE.org
CVE-2026-25986coverage & exploitation statusNVD · CVE.org
CVE-2026-25987coverage & exploitation statusNVD · CVE.org
CVE-2026-25988coverage & exploitation statusNVD · CVE.org
CVE-2026-25989coverage & exploitation statusNVD · CVE.org
CVE-2026-26066coverage & exploitation statusNVD · CVE.org
CVE-2026-26283coverage & exploitation statusNVD · CVE.org
CVE-2026-26284coverage & exploitation statusNVD · CVE.org
CVE-2026-26983coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for ImageMagick

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from CERT-Bund (BSI) Security Advisories