[UPDATE] [medium] ImageMagick (pixel cache server): Multiple vulnerabilities allow information disclosure or DoS

A local attacker can exploit multiple vulnerabilities in ImageMagick to conduct a Denial of Service attack or disclose confidential information.

CSIRTS triage

What: Multiple vulnerabilities allow a local attacker to conduct a Denial of Service attack or disclose confidential information.
Who is affected: Local users of ImageMagick.
Urgency: Remediation is important due to the potential for information disclosure and Denial of Service, although exploitation has not been reported.
Action: Update to the latest version of ImageMagick.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch ImageMagick

Get an email when a new ImageMagick advisory drops — max one per day, one-click unsubscribe.

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-466920.09% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.
Low exploitation riskCVE-2026-466930.08% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 0% of all scored CVEs.
Low exploitation riskCVE-2026-471650.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.
Low exploitation riskCVE-2026-471660.09% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.

CVE	CSIRTS overview	External
CVE-2026-46692	coverage & exploitation status	NVD · CVE.org
CVE-2026-46693	coverage & exploitation status	NVD · CVE.org
CVE-2026-47165	coverage & exploitation status	NVD · CVE.org
CVE-2026-47166	coverage & exploitation status	NVD · CVE.org