CVE WATCH / VULNERABILITY DETAIL
CVE-2026-112301
HIGHCVSS 7.3NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been released
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog