Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-106566

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in version 7.1.2-32.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 2.8%
CVSS Severity
CVSS v3 Score 4.0
Products affected by CVE-2026-106566


Contact Us

Shodan ® - All rights reserved