CVE-2026-13606

highcovered by 1 sourcefirst seen 2026-07-21

A remote, anonymous attacker can exploit a vulnerability in GraphicsMagick to potentially execute arbitrary code, corrupt memory, or cause a Denial-of-Service condition.

CSIRTS triage

What: A vulnerability allows a remote attacker to potentially execute arbitrary code or cause a Denial-of-Service condition.
Who is affected: Remote, anonymous attackers can exploit this vulnerability in GraphicsMagick.
Urgency: Remediation is high urgency due to the potential for remote code execution and service disruption.
Action: Update GraphicsMagick to the latest version to fix this vulnerability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-13606

Get an email if CVE-2026-13606 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

high[NEW] [high] GraphicsMagick (PCD decoder): Vulnerability allows code executioncert-bund · 2026-07-21

External references

NVD record for CVE-2026-13606

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-13606 status](https://www.csirts.com/badge/CVE-2026-13606)](https://www.csirts.com/cve/CVE-2026-13606)