← Database

CVE-2026-28666

HIGH CVSS: 8.8 Published: 2026-09-08 Modified: 2026-09-10

Description

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Platforms

Unknown

Weakness Type

CWE-863

References