CVE-2026-105404

Status: RejectedUnscored—

Rejected reason: This CVE ID has been rejected as a duplicate.

CVSS

NVD hasn't assigned a CVSS score to this CVE (common since the April 2026 policy change).

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.25%
Percentile among all scored CVEs: 15
Score date: 10/9/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

🎯 ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1203 Exploitation for Client Executionexecution85 %
Primary impactT1059 Command and Scripting Interpreterexecution80 %

Vector CVSS con UI:P indica interacción del usuario (procesar imagen PostScript); CWE-94 (code injection) y descripción explícita de inyección de código PostScript arbitrario en archivos generados por ImageMagick.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

🛡️ ATT&CK mitigations that cover these techniques

Restrict Web-Based Content Privileged Account Management Limit Software Installation Execution Prevention Behavior Prevention on Endpoint Disable or Remove Feature or Program

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Imagemagick — Imagemagick^AI

CWEs

CWE-94

Raw JSON (NVD)

Show

{
  "id": "CVE-2026-105404",
  "cveTags": [],
  "metrics": {},
  "published": "2026-10-08T15:17:33.800",
  "references": [],
  "vulnStatus": "Rejected",
  "descriptions": [
    {
      "lang": "en",
      "value": "Rejected reason: This CVE ID has been rejected as a duplicate."
    }
  ],
  "lastModified": "2026-10-09T14:17:15.400",
  "sourceIdentifier": "disclosure@vulncheck.com"
}