Skip to content
VulniPulse
Sign in
Highest advisory severityLow 1 vendor · 1 advisory

CVE-2026-61859

CVE-2026-61859: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityLow3.3

    Low [CVE-2026-61859] Information disclosure via policy bypass in -script operation

    CVE-2026-61859Source published Source updated

    ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allows reading files from paths that are otherwise disallowed by the configured security policy. A flaw was found in ImageMagick. Red Hat Enterprise Linux ships ImageMagick in RHEL 6 ELS and RHEL 7 ELS. This flaw has been rated as having a Low security impact and is not currently planned to be addressed in future updates of those products. For additional information, refer to the Issue Severity Classification:. Red Hat severity: Low — CVSS 3.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Weakness: CWE-639. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Red Hat does not currently list a…

    Affected products in this advisory
    • Red Hat Enterprise Linux 6
    • Red Hat Enterprise Linux 7
    • Red Hat package: imagemagick
    Source-reported affected versions
    • < 7.1.2-26
    • < 6.9.13-x
    • < 6.9.13-51
    • 6.9.13
    Source-reported fixed versions
    No fixed-version detail extracted. This does not mean no fix exists.
    Mitigation guidance
    • Restrict use of the -script option by ensuring untrusted users cannot invoke ImageMagick commands directly. If ImageMagick is used in an automated pipeline, use a wrapper that does not pass the -script flag. Upgrade to ImageMagick 7.1.2-26 or 6.9.13-51 mitigates the issue.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features