CVE record · 1 source
CVE-2026-111813
CVSS 10.0Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default (unsigned)…
- Vendor
- Apache Software Foundation
- Product
- ImageMagick / Ghostscript / FFmpeg / libxml2, Other Apache projects
- CVSS
- 10.0
- EPSS
- 0.005 (p42)
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default (unsigned)…
Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default (unsigned) configuration. This issue affects Apache Traffic Server: from 8.0.1 through 8.1.11…