一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月13日

CVE-2026-109277 [LOW] – ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operatio

未分类
📑 文章目录

ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies.