ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when
    memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to
    reference freed memory, potentially enabling denial of service or code execution. (CVE-2026-61861)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790182513 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions     prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the `InterpretImageFilename` function. The     issue stems from an off-by-one error that causes out-of-bounds memory access when processing format     strings containing consecutive percent signs (`%%`). Versions 7.1.2-0 and 6.9.13-26 fix the issue.
    (CVE-2025-53014)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions     prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick stream` command, specifying multiple consecutive     `%d` format specifiers in a filename template causes a memory leak. Versions 7.1.2-0 and 6.9.13-26 fix the     issue. (CVE-2025-53019)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions     prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick mogrify` command, specifying multiple consecutive     `%d` format specifiers in a filename template causes internal pointer arithmetic to generate an address     below the beginning of the stack buffer, resulting in a stack overflow through `vsnprintf()`. Versions     7.1.2-0 and 6.9.13-26 fix the issue. (CVE-2025-53101)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 6.9.13-27 and 7.1.2-1, there is undefined behavior (function-type-mismatch) in splay tree cloning     callback. This results in a deterministic abort under UBSan (DoS in sanitizer builds), with no crash in a     non-sanitized build. This issue has been patched in versions 6.9.13-27 and 7.1.2-1. (CVE-2025-55160)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon (:) to montage
    -geometry leads GetGeometry() to set width/height to 0. Later, ThumbnailImage() divides by these zero     dimensions, triggering a crash (SIGFPE/abort), resulting in a denial of service. This issue has been     patched in versions 6.9.13-28 and 7.1.2-2. (CVE-2025-55212)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790182513 advisory.

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions     prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the `InterpretImageFilename` function. The     issue stems from an off-by-one error that causes out-of-bounds memory access when processing format     strings containing consecutive percent signs (`%%`). Versions 7.1.2-0 and 6.9.13-26 fix the issue.
    (CVE-2025-53014)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions     prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick stream` command, specifying multiple consecutive     `%d` format specifiers in a filename template causes a memory leak. Versions 7.1.2-0 and 6.9.13-26 fix the     issue. (CVE-2025-53019)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions     prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick mogrify` command, specifying multiple consecutive     `%d` format specifiers in a filename template causes internal pointer arithmetic to generate an address     below the beginning of the stack buffer, resulting in a stack overflow through `vsnprintf()`. Versions     7.1.2-0 and 6.9.13-26 fix the issue. (CVE-2025-53101)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 6.9.13-27 and 7.1.2-1, there is undefined behavior (function-type-mismatch) in splay tree cloning     callback. This results in a deterministic abort under UBSan (DoS in sanitizer builds), with no crash in a     non-sanitized build. This issue has been patched in versions 6.9.13-27 and 7.1.2-1. (CVE-2025-55160)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon (:) to montage
    -geometry leads GetGeometry() to set width/height to 0. Later, ThumbnailImage() divides by these zero     dimensions, triggering a crash (SIGFPE/abort), resulting in a denial of service. This issue has been     patched in versions 6.9.13-28 and 7.1.2-2. (CVE-2025-55212)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784898695 advisory.

  - ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9     and prior, the TIM (PSX TIM) image parser contains a critical integer overflow vulnerability in its     ReadTIMImage function (coders/tim.c). The code reads width and height (16-bit values) from the file header     and calculates image_size = 2 * width * height without checking for overflow. On 32-bit systems (or where     size_t is 32-bit), this calculation can overflow if width and height are large (e.g., 65535), wrapping     around to a small value. This results in a small heap allocation via AcquireQuantumMemory and later     operations relying on the dimensions can trigger an out of bounds read. This issue is fixed in version     7.1.2-10. (CVE-2025-66628)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage()     function becomes trapped in an infinite loop while searching for the Sync marker, causing the program to     become unresponsive and continuously consume CPU resources, ultimately leading to system resource     exhaustion and denial of service. Versions 7.1.2-15 and 6.9.13-40 contain a patch. (CVE-2026-24485)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious element causes ImageMagick to     attempt to allocate ~674 GB of memory, leading to an out-of-memory abort. Versions 7.1.2-15 and 6.9.13-40     contain a patch. (CVE-2026-25985)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can cause a denial of service. An off-by-one boundary     check (`>` instead of `>=`) that allows bypass the guard and reach an undefined `(size_t)` cast. Versions     7.1.2-15 and 6.9.13-40 contain a patch. (CVE-2026-25989)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing     functions. User-controlled kernel strings exceeding a buffer are copied into fixed-size stack buffers via     memcpy without bounds checking, resulting in stack corruption. This vulnerability is fixed in 7.1.2-16 and     6.9.13-41. (CVE-2026-28494)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1784898733 advisory.

  - ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9     and prior, the TIM (PSX TIM) image parser contains a critical integer overflow vulnerability in its     ReadTIMImage function (coders/tim.c). The code reads width and height (16-bit values) from the file header     and calculates image_size = 2 * width * height without checking for overflow. On 32-bit systems (or where     size_t is 32-bit), this calculation can overflow if width and height are large (e.g., 65535), wrapping     around to a small value. This results in a small heap allocation via AcquireQuantumMemory and later     operations relying on the dimensions can trigger an out of bounds read. This issue is fixed in version     7.1.2-10. (CVE-2025-66628)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage()     function becomes trapped in an infinite loop while searching for the Sync marker, causing the program to     become unresponsive and continuously consume CPU resources, ultimately leading to system resource     exhaustion and denial of service. Versions 7.1.2-15 and 6.9.13-40 contain a patch. (CVE-2026-24485)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious element causes ImageMagick to     attempt to allocate ~674 GB of memory, leading to an out-of-memory abort. Versions 7.1.2-15 and 6.9.13-40     contain a patch. (CVE-2026-25985)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can cause a denial of service. An off-by-one boundary     check (`>` instead of `>=`) that allows bypass the guard and reach an undefined `(size_t)` cast. Versions     7.1.2-15 and 6.9.13-40 contain a patch. (CVE-2026-25989)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing     functions. User-controlled kernel strings exceeding a buffer are copied into fixed-size stack buffers via     memcpy without bounds checking, resulting in stack corruption. This vulnerability is fixed in 7.1.2-16 and     6.9.13-41. (CVE-2026-28494)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1784898786 advisory.

  - ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9     and prior, the TIM (PSX TIM) image parser contains a critical integer overflow vulnerability in its     ReadTIMImage function (coders/tim.c). The code reads width and height (16-bit values) from the file header     and calculates image_size = 2 * width * height without checking for overflow. On 32-bit systems (or where     size_t is 32-bit), this calculation can overflow if width and height are large (e.g., 65535), wrapping     around to a small value. This results in a small heap allocation via AcquireQuantumMemory and later     operations relying on the dimensions can trigger an out of bounds read. This issue is fixed in version     7.1.2-10. (CVE-2025-66628)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage()     function becomes trapped in an infinite loop while searching for the Sync marker, causing the program to     become unresponsive and continuously consume CPU resources, ultimately leading to system resource     exhaustion and denial of service. Versions 7.1.2-15 and 6.9.13-40 contain a patch. (CVE-2026-24485)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious element causes ImageMagick to     attempt to allocate ~674 GB of memory, leading to an out-of-memory abort. Versions 7.1.2-15 and 6.9.13-40     contain a patch. (CVE-2026-25985)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can cause a denial of service. An off-by-one boundary     check (`>` instead of `>=`) that allows bypass the guard and reach an undefined `(size_t)` cast. Versions     7.1.2-15 and 6.9.13-40 contain a patch. (CVE-2026-25989)

  - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to     versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing     functions. User-controlled kernel strings exceeding a buffer are copied into fixed-size stack buffers via     memcpy without bounds checking, resulting in stack corruption. This vulnerability is fixed in 7.1.2-16 and     6.9.13-41. (CVE-2026-28494)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099474 advisory.

    ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when     memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to     reference freed memory, potentially enabling denial of service or code execution.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3219-1 advisory.

    - CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
    - CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in       `OpenPixelCache` (bsc#1271100).
    - CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
    - CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized `magnify:method` value     (bsc#1271314).
    - CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
    - CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
    - CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
    - CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
    - CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
    - CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
    - CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
    - CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
    - CVE-2026-61860: use-after-free when `freetype` initialization fails (bsc#1271494).
    - CVE-2026-61861: use-after-free in `FormatMagickCaption` when memory allocation fails (bsc#1271294).
    - CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
    - CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
    - CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails     (bsc#1271491).
    - CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
    - CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
    - CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
    - CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
    - CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
    - CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
    - CVE-2026-61872: memory leak in TIFF encoder when invalid `tiff:tile-geometry` is specified     (bsc#1271484).
    - Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21391-1 advisory.

    This update for ImageMagick fixes the following issues

    - CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081).
    - CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in     OpenPixelCache (bsc#1271100).
    - CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
    - CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value     (bsc#1271314).
    - CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
    - CVE-2026-56377: Policy Bypass can create or truncate files (bsc#1270006).
    - CVE-2026-61465: Policy Bypass possible with matrix-backed operations (bsc#1271313).
    - CVE-2026-61857: Heap-use-after-free via XMP profile could result in a crash (bsc#1271312).
    - CVE-2026-61858: Policy Bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
    - CVE-2026-61861: Use-After-Free in FormatMagickCaption when memory allocation fails (bsc#1271294).
    - CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3193-1 advisory.

    This update for ImageMagick fixes the following issues

    - CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
    - CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in       `OpenPixelCache` (bsc#1271100).
    - CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
    - CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized `magnify:method` value     (bsc#1271314).
    - CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
    - CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
    - CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
    - CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
    - CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
    - CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
    - CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
    - CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
    - CVE-2026-61861: use-after-free in `FormatMagickCaption` when memory allocation fails (bsc#1271294).
    - CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
    - CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
    - CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails     (bsc#1271491).
    - CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
    - CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
    - CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
    - CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
    - CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
    - CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
    - CVE-2026-61872: memory leak in TIFF encoder when invalid `tiff:tile-geometry` is specified     (bsc#1271484).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3194-1 advisory.

    This update for ImageMagick fixes the following issues


    - CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
    - CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
    - CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
    - CVE-2026-61860: use-after-free when `freetype` initialization fails (bsc#1271494).
    - CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
    - CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
    - CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails     (bsc#1271491).
    - CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
    - CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
    - CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
    - CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
    - CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
    - CVE-2026-61871: memory leak in ICON decoder when allocation fails (bsc#1271485).
    - CVE-2026-61872: memory leak in TIFF encoder when invalid `tiff:tile-geometry` is specified     (bsc#1271484).
    - CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
    - CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in       `OpenPixelCache` (bsc#1271100).
    - CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
    - CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized `magnify:method` value     (bsc#1271314).
    - CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
    - CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
    - CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
    - CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
    - CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
    - CVE-2026-61861: use-after-free in `FormatMagickCaption` when memory allocation fails (bsc#1271294).
    - CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when     memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to     reference freed memory, potentially enabling denial of service or code execution. (CVE-2026-61861)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
462900	Echo: imagemagick: security update to 8:7.1.1.43+dfsg1-1+deb13u11+e2	Tenable Cloud Security	Echo Local Security Checks	Local	medium
462900	Echo: imagemagick: security update to 8:7.1.1.43+dfsg1-1+deb13u11+e2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
361701	Rocky Linux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790182513)	Nessus	Rocky Linux Local Security Checks	Local	critical
361599	AlmaLinux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790182513)	Nessus	Alma Linux Local Security Checks	Local	critical
361391	CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1784898695)	Nessus	CentOS Local Security Checks	Local	medium
359864	CentOS Linux 8 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1784898733)	Nessus	CentOS Local Security Checks	Local	medium
351804	CentOS Linux 8.5 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1784898786)	Nessus	CentOS Local Security Checks	Local	medium
336984	Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099474)	Nessus	Unity Linux Local Security Checks	Local	medium
329503	SUSE SLES15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:3219-1)	Nessus	SuSE Local Security Checks	Local	critical
329308	openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21391-1)	Nessus	SuSE Local Security Checks	Local	medium
329144	SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2026:3193-1)	Nessus	SuSE Local Security Checks	Local	medium
329135	SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:3194-1)	Nessus	SuSE Local Security Checks	Local	medium
326397	Linux Distros Unpatched Vulnerability : CVE-2026-61861	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-61861

medium

Tenable Plugins

medium

medium

critical

critical

medium

medium

medium

medium

critical

medium

medium

medium

medium