CVE-2026-105405

Status: RejectedUnscored—

Rejected reason: This CVE ID has been rejected as a duplicate.

CVSS

NVD hasn't assigned a CVSS score to this CVE (common since the April 2026 policy change).

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.25%
Percentile among all scored CVEs: 15
Score date: 10/9/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

🎯 ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1190 Exploit Public-Facing Applicationinitial access75 %
Primary impactT1499.004 Application or System Exploitationimpact80 %

Vulnerabilidad de acceso remoto (AV:N) en decodificador MVG de ImageMagick; imagen MVG manipulada provoca crash y denegación de servicio (VA:H, application unavailability).

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

🛡️ ATT&CK mitigations that cover these techniques

Filter Network Traffic Vulnerability Scanning Privileged Account Management Network Segmentation Limit Access to Resource Over Network Application Isolation and Sandboxing

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Imagemagick — Imagemagick^AI

CWEs

CWE-763

Raw JSON (NVD)

Show

{
  "id": "CVE-2026-105405",
  "cveTags": [],
  "metrics": {},
  "published": "2026-10-08T15:17:33.963",
  "references": [],
  "vulnStatus": "Rejected",
  "descriptions": [
    {
      "lang": "en",
      "value": "Rejected reason: This CVE ID has been rejected as a duplicate."
    }
  ],
  "lastModified": "2026-10-09T14:17:15.907",
  "sourceIdentifier": "disclosure@vulncheck.com"
}