Skip to content
Multiple ImageMagick Vulnerabilities Affecting Ubuntu and openSUSE

Multiple ImageMagick Vulnerabilities Affecting Ubuntu and openSUSE

First seen 1 Oct 2026, 20:05 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 1, 2026 at 21:05 UTC
  • •Multiple vulnerabilities in ImageMagick affect Ubuntu and openSUSE systems.
  • •Critical flaws could lead to denial of service or process crashes.
  • •Patches are available; users should apply them immediately.

Recent vulnerabilities in ImageMagick have been disclosed, affecting various Ubuntu and openSUSE versions. The flaws, including CVE-2026-93586, CVE-2026-93587, CVE-2026-93588, CVE-2026-93589, and CVE-2026-93590, can lead to denial of service and process crashes. Specifically, Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS are impacted, along with openSUSE Leap 16.0. The vulnerabilities were published on September 18, 2026, and are categorized with varying CVSS scores, indicating a range of severity from low to medium. Users are advised to apply the latest patches to mitigate risks. The vulnerabilities stem from issues such as use-after-free and NULL pointer dereferences, which could be exploited by local attackers. As of now, no has been reported.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-06-21
CVE-2026-56367 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-18
Multiple CVEs published for ImageMagick
CVE-2026-93586, CVE-2026-93587, CVE-2026-93588, CVE-2026-93589, and CVE-2026-93590 were disclosed, affecting various Ubuntu and openSUSE versions.
Ubuntu
2026-09-18
CVE-2026-93589 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-18
CVE-2026-93588 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-18
CVE-2026-93590 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-18
CVE-2026-93586 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-18
CVE-2026-93587 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-01
openSUSE security update released
An update for ImageMagick was issued to address the identified vulnerabilities, urging users to apply the patch.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Ubuntu and CVE-2026-56367 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 3

Common questions

Which versions of Ubuntu are affected?
Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS are affected.
What should I do to protect my systems?
Apply the latest patches for ImageMagick as soon as possible to mitigate the vulnerabilities.
Are these vulnerabilities actively being exploited?
No active exploitation has been reported at this time.