ImageMagick Vulnerabilities Allow Denial of Service Attacks

CERT-Bund has released advisory WID-SEC-2026-0849 detailing critical vulnerabilities in Open Source ImageMagick versions prior to 7.1.2-18 and 6.9.13-43. The advisory, with a CVSS Base Score of 5.1, indicates that these flaws can be exploited by local or remote attackers to cause a denial of service. The affected operating systems include Linux, UNIX, and Windows.

While this is a notice of vulnerabilities and not a direct regulatory mandate, organizations utilizing these ImageMagick versions should prioritize applying available mitigations or updating to patched versions to prevent potential service disruptions. The advisory highlights that mitigation is available, and prompt action is recommended to secure affected systems and prevent denial-of-service attacks.