SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-52490

CRITICAL · CVSS 9.8 EPSS 0.40% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-24 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

An arbitrary code execution vulnerability exists in the process_command_opts() function of libtiff, which could allow an attacker to execute malicious code when processing TIFF files. Organizations using libtiff in their applications should prioritize this issue, as it poses a significant risk to system integrity and security. Immediate action is recommended to assess and mitigate potential exposure.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
gist.github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-52490
Severity
CRITICAL
CVSS
9.8
EPSS
0.40%

Original NVD Description

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c