HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-108693 — ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled s...

·Source: NIST NVD

Updated:

Executive Summary

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with ImageMagick privileges when PDF, PostScript, or EPS files are converted.

Analysis

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with ImageMagick privileges when PDF, PostScript, or EPS files are converted. CVSS Score: 7. Published: 2026-10-11T02:16:37.607.

Indicators of Compromise (1)

CVE (1)
CVE-2026-108693
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 11, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown

INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 suspects. Codenamed Operation Serengeti III, the cybercrime crackdown took place between June 29 and August 31, 2026. "Authorities identified

The Hacker News
CRITICALVulnerability

New Serious PHP Vulnerabilities Released and Patched

PHP maintainers have released two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the ris

Schneier on Security
MEDIUMVulnerability

Pine Labs and Webxpay bring India's UPI to Sri Lanka

India is Sri Lanka’s largest and fastest-growing tourism source market. In 2025, over 5.3 lakh Indian travellers visited Sri Lanka, making India the country’s largest source of tourists by a wide margin, with this momentum continuing into 2026.

Finextra