CVE-2026-112900Vulnerability
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported yesterday
EPSS0.4%
higher than 36% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 36% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image“The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-112403, CVE-2026-112393
Thanks — we review every report.