Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-109276

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and degrading availability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 32.5%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2026-109276


Contact Us

Shodan ® - All rights reserved