CVE-2026-105826

Status: RejectedUnscored—

Rejected reason: This CVE ID has been rejected as a duplicate.

CVSS

NVD hasn't assigned a CVSS score to this CVE (common since the April 2026 policy change).

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.33%
Percentile among all scored CVEs: 24
Score date: 10/9/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

🎯 ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1190 Exploit Public-Facing Applicationinitial access75 %
Primary impactT1499.004 Application or System Exploitationimpact70 %

Vector AV:N/PR:N/UI:N indica explotación remota sin autenticación ni interacción (T1190). El bypass de límites de tamaño de archivos temporales causa consumo de disco (DoS T1499.004); CWE-409 (desvalidación de límites) sustenta la vulnerabilidad.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

🛡️ ATT&CK mitigations that cover these techniques

Filter Network Traffic Vulnerability Scanning Privileged Account Management Network Segmentation Limit Access to Resource Over Network Application Isolation and Sandboxing

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Imagemagick — Imagemagick^AI

CWEs

CWE-409

Raw JSON (NVD)

Show

{
  "id": "CVE-2026-105826",
  "cveTags": [],
  "metrics": {},
  "published": "2026-10-08T15:17:34.650",
  "references": [],
  "vulnStatus": "Rejected",
  "descriptions": [
    {
      "lang": "en",
      "value": "Rejected reason: This CVE ID has been rejected as a duplicate."
    }
  ],
  "lastModified": "2026-10-09T14:17:17.067",
  "sourceIdentifier": "disclosure@vulncheck.com"
}