CVE-2026-55597 | Mend Vulnerability Database

AI APP SECURITY

Secure the layer where modern AI risk lives

Mend AI secures how AI behaves, not just what its built from.

View Mend AI

AI red teaming
Automate adversarial testing for conversational AI

Runtime protection
Set guardrails for deterministic security and safety enforcement

System prompt hardening
Defend against jailbreaks and injections with AIWE scoring

Policies and governance
Enforce policies and automate workflows

product TOUR

See Mend AI in action

Find shadow AI, reduce exposure, and protect AI powered apps.

Take a tour

APPlication SECurity

Prioritize and remediate risk across the code layer

Mend AppSec cuts through the noise to reduce real application risk.

View Mend AppSec

Mend SCA
Secure open source dependencies and container images

Mend SAST
Detect, classify, triage, and remediate newly introduced risks with AI

Reachability
Prioritize exploitable risks with EPSS and CVSS 4.0

Scalability
Built for the largest codebases

Repo Integration
Native to GitHub, GitLab, Bitbucket and Azure

product TOUR

See Mend AppSec in action

Detect exploitable risk, prioritize what matters, and remediate faster.

Take a tour

DEPENDENCY management

Automate dependency updates at scale to reduce risk by up to 70%

The trusted standard for automated dependency updates — running on millions of repositories.

View Mend Renovate

All Renovate Options
Choose the best way to update your dependencies

Mend Renovate ROI
Estimate your savings in less than a minute

Mend Renovate GUIDE

ROI of Automated Dependency Management

See how organizations achieve 90%+ efficiency gains.

See your ROI

Expand AppSec Coverage

Extend coverage to runtime and end-of-life

Extend Mend AppSec to running applications, exposed APIs, and aging dependencies.

DAST
Test running applications the way attackers see them

API Security
Discover and secure every exposed endpoint

EOL Support
Security patches for end-of-life packages

featured report

A practical framework for security & dev teams

Build effective AI governance. Classify AI risk and secure AI components.

Read the report
AI SECURITY

Secure every layer of your AI stack

From the models you train to the code your assistants generate — keep AI safe, compliant and auditable.

AI-powered app security
Apply AI to triage, prioritize and remediate

AI red teaming
Adversarial testing for LLMs and agents

AI-based remediation workflows
Auto-generated fixes, reviewed by your team

System prompt hardening
Defend against prompt injection and abuse

AI-BOM
A bill of materials for your AI components

Ciso’s guide

Securing AI from the start

Address AI-specific security risks that traditional AppSec tools miss.

Read the guide

CODE SECURITY

Find and fix vulnerabilities in code you write

Static, dynamic and AI-generated code coverage — wherever your developers ship from.

AI-generated code security
Catch issues in code from Copilot and friends

Code scanning
Scanning across every language and repo

DAST
Runtime testing for live applications

Practical guide

Making the most of your SAST investment

What to look for in a code-security platform built for AI.

Read the guide

Supply Chain Security

Secure everything you don’t write yourself

Open source, containers, packages and the build pipeline —
under one policy and one risk model.

Open source security
Find and fix CVEs in your dependencies

Dependency updates
Patch and upgrade automatically with Renovate

Container security
Scan images, registries and running workloads

Software supply chain security
Trust your build pipeline, end to end

Open source license compliance
Stay license-clean across every release

essential guide

Threat hunting in the software supply chain

How leading teams move from visibility to active defense.

Read the report

COMPLIANCE & REPORTING

Audit-ready by default

Generate the inventories and evidence regulators ask for — without slowing developers down.

Compliance
Map controls to CRA, EU AI Act, NIST, and more

SBOM
Generate, share and track SBOMs

Open source license compliance
License obligations, satisfied automatically

AI-BOM
Bill of materials for AI components

COMPLIANCE GUIDE

Open source & AI licensing — explained

A clear compliance framework that keeps pace with development.

Read the guide
WHY MEND.io

Built for AI — not retrofitted to it

Compare Mend AI to other AI security and red teaming tools.

Why teams choose Mend.io

Mend vs. HiddenLayer
Full lifecycle vs. runtime-only

Mend vs. Mindgard
Production AI security at scale

Mend vs. Noma Security
AppSec + AI in one platform

ciso’s guide

Securing AI from the start

address AI-specific security risks that traditional AppSec tools miss.

Read the guide

WHY MEND.io

How Mend.io stacks up against legacy AppSec tools

Side-by-side comparisons of features, pricing, accuracy and developer experience.

Why teams choose Mend.io

Mend vs. Black Duck
Modern AppSec vs. legacy SCA

Mend vs. Checkmarx
Faster scans, fewer false positives

Mend vs. GHAS
Deeper ecosystem coverage

Mend vs. Snyk
Reachability and remediation depth

Mend vs. Sonatype
Beyond SCA — full AppSec coverage

Mend vs. Veracode
Modern platform vs. SaaS legacy

compliance guide

Open source & AI licensing — explained

A clear compliance framework that keeps pace with development.

Read the guide

Buyer's guides

Guides for evaluating AI Security and AppSec tools

Overviews of the leading tools in each category — written for evaluators.

Why teams choose Mend.io

Best Dependency Management Tools
Top tools for managing OSS dependencies

Best SAST Tools
Static analysis tools, compared

Best SCA Tools
Open-source security tools, compared

featured report

A practical framework for security & dev teams

Build effective AI governance. Classify AI risk and secure AI components.

Read the report
Pricing
About Mend.io

Built to close the gap between speed and security

Who we are, who we work with, and what we stand for.

About us
Our story and leadership

Events
Upcoming events and webinars

Newsroom
Press releases and coverage

Contact us
Connect with us

FEATURED report

A practical framework for security & dev teams

Build effective AI governance. Classify AI risk and secure AI components.

Read the report

PARTNERS & PEOPLE

Build the future of AI Security & AppSec with us

Careers, partnerships, and the communities we invest in.

Careers
Open roles across the company

Partners
Channel and tech partners

Become a partner
Apply to the partner program

FEATURED report

A practical framework for security & dev teams

Build effective AI governance. Classify AI risk and secure AI components.

Read the report
LEARN & EXPLORE

Guides, research and product education

Hand-picked from our security and engineering teams.

Resource Center
Whitepapers, reports, webinars, videos, and data sheets

Blog
Insights from the Mend.io team

Podcasts
Conversations with leading experts

Case studies
How teams ship securely with Mend.io

FEATURED REPORT

A practical framework for security & dev teams

Build effective AI governance. Classify AI risk and secure AI components.

Read the report

LEARN & EXPLORE

Security guides built by practitioners

In-depth, vendor-neutral guides to the topics security teams search for most.

See all guides

SAST Guide
Static application security testing

SCA Guide
Software composition analysis

DevSecOps Guide
Security across the DevOps pipeline

SBOM Guide
Improve transparency, security, and compliance

AI Security Guide
Protect AI models, data, and systems

Application Security Guide
AppSec types, tools, and best practices

Dependency Management Guide
Automating dependency updates

LLM Security Guide
Mitigating risks and future trends

Application Security Testing Guide
Pre-production scanning and runtime protection

DEVELOPERS HUB

Build with Mend.io

Integrations, languages, documentation, and the Mend.io Vulnerability Database.

Integrations
Find your integration

Languages
Find your language

Documentation
Set up, configure and integrate

Vulnerability Database
Free open source vuln search

featured report

A practical framework for security & dev teams

Build effective AI governance. Classify AI risk and secure AI components.

Read the report

Schedule a Demo

Vulnerability DatabaseCVE-2026-55597

CVE-2026-55597

Published:July 01, 2026

Updated:August 04, 2026

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26.

Affected Packages

https://github.com/ImageMagick/ImageMagick.git (GITHUB):

Affected version(s) >=7.0.1-0 <7.1.2-26

Fix Suggestion:

Update to version 7.1.2-26

magick.net-q8-x64 (NUGET):

Affected version(s) >=6.8.5.401 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q8-x86 (NUGET):

Affected version(s) >=6.8.5.401 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q8-openmp-arm64 (NUGET):

Affected version(s) >=8.6.0 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-x86 (NUGET):

Affected version(s) >=6.8.5.401 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-hdri-x86 (NUGET):

Affected version(s) >=6.8.9.101 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-hdri-anycpu (NUGET):

Affected version(s) >=6.8.9.101 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-x64 (NUGET):

Affected version(s) >=6.8.5.401 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q8-arm64 (NUGET):

Affected version(s) >=8.6.0 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-arm64 (NUGET):

Affected version(s) >=8.6.0 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-anycpu (NUGET):

Affected version(s) >=6.8.8.1001 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-hdri-arm64 (NUGET):

Affected version(s) >=8.6.0 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q8-openmp-x64 (NUGET):

Affected version(s) >=7.14.0 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q8-anycpu (NUGET):

Affected version(s) >=6.8.8.1001 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-hdri-x64 (NUGET):

Affected version(s) >=6.8.9.101 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-hdri-openmp-arm64 (NUGET):

Affected version(s) >=8.6.0 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-openmp-x64 (NUGET):

Affected version(s) >=7.14.0 <14.15.0

Fix Suggestion:

Update to version 14.15.0

magick.net-q16-openmp-arm64 (NUGET):

Affected version(s) >=8.6.0 <14.15.0

Fix Suggestion:

Update to version 14.15.0

Related Resources (5)

https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55597.json

https://github.com/ImageMagick/ImageMagick

https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c4v7-w88g-m6c4

https://nvd.nist.gov/vuln/detail/CVE-2026-55597

Do you need more information?

CVSS v4

Base Score:

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

PASSIVE

Vulnerable System Confidentiality

NONE

Vulnerable System Integrity

NONE

Vulnerable System Availability

HIGH

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Weakness Type (CWE)

Out-of-bounds Write

Incorrect Calculation

EPSS

Base Score:

0.10

CVE-2026-55597 | Mend Vulnerability Database