SEPTEMBER 11, 2026
Live Feed
Back to database
Case File

CVE-2026-86421

LOW · CVSS 3.7 EPSS 0.44% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-07 · Last synced 2026-09-11

CyberRota Analysis

AI-Generated

ImageMagick versions prior to 7.1.2-30 and 6.9.13-55 are vulnerable to a memory leak in the MSL image decoder, which can be exploited by an attacker to exhaust system memory and potentially lead to a denial of service. Organizations using these versions, particularly those processing MSL images, should prioritize updating to mitigate the risk of service interruptions. While the severity is rated low, the potential for resource exhaustion warrants attention in environments reliant on image processing.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-86421
Severity
LOW
CVSS
3.7
EPSS
0.44%

Original NVD Description

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service.

Related CVEs

Other vulnerabilities affecting the same vendor(s)