Is CVE-2016-3718 being actively exploited?

Yes. CVE-2016-3718 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added on November 3, 2021.

What is the CVSS score for CVE-2016-3718?

CVE-2016-3718 has a CVSS 3.1 base score of 5.5 (MEDIUM).

CVE-2016-3718

MEDIUM · CVSS 5.5CISA KEV: actively exploitedEPSS 75.6%EU EUVD: exploited

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

Key facts

CVSS score: 5.5 (v3.1)
Severity: MEDIUM
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weakness (CWE): CWE-918
EPSS score: 75.6% (100th percentile)
In CISA KEV: Yes, added November 3, 2021
In EU EUVD: Yes (EUVD-2016-4739)
Published: May 5, 2016
NVD last modified: June 17, 2026
Status: Analyzed

CISA Known Exploited Vulnerability

ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

Added to the KEV catalog on November 3, 2021; federal remediation due May 3, 2022.

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2016-4739 in the EU Vulnerability Database. ENISA flags it as known exploited. Last updated in EUVD on October 21, 2025.

View on the EU Vulnerability Database

Affected products

canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
imagemagick / imagemagick
imagemagick / imagemagick
imagemagick / imagemagick
opensuse / leap
opensuse / opensuse
oracle / linux
oracle / linux
oracle / solaris
oracle / solaris
redhat / enterprise linux desktop
redhat / enterprise linux desktop
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux for ibm z systems
redhat / enterprise linux for ibm z systems
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for ibm z systems eus
redhat / enterprise linux for power big endian
redhat / enterprise linux for power big endian
redhat / enterprise linux for power big endian eus
redhat / enterprise linux for power big endian eus
redhat / enterprise linux for power big endian eus
redhat / enterprise linux for power big endian eus
redhat / enterprise linux for power big endian eus
redhat / enterprise linux for power big endian eus
redhat / enterprise linux for power big endian eus
redhat / enterprise linux for power little endian
redhat / enterprise linux for power little endian eus
redhat / enterprise linux for power little endian eus
redhat / enterprise linux for power little endian eus
redhat / enterprise linux for power little endian eus
redhat / enterprise linux for power little endian eus
redhat / enterprise linux for power little endian eus
redhat / enterprise linux hpc node
redhat / enterprise linux hpc node
redhat / enterprise linux hpc node eus

and 34 more…

Certified products that may be affected

29 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Oracle Linux 7 NSS Cryptographic Module - Oracle Corporation - FIPS 140 4586 - historical
Oracle Linux 7 Libreswan Cryptographic Module - Oracle Corporation - FIPS 140 4266 - historical
Oracle Linux 7 OpenSSH Client Cryptographic Module - Oracle Corporation - FIPS 140 4206 - historical
Oracle Linux 7 OpenSSH Server Cryptographic Module - Oracle Corporation - FIPS 140 4176 - historical
Oracle Linux 7 Unbreakable Enterprise Kernel (UEK 6) Cryptographic Module - Oracle Corporation - FIPS 140 4169 - historical

See all 29 in the Security Certifications Explorer.

References

http://git.imagemagick.org/repos/ImageMagick/blob/a01518e08c840577cabd7d3ff291a9ba735f7276/ChangeLog(Patch, Vendor Advisory)
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00024.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00025.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00028.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00032.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00051.html(Third Party Advisory)
http://rhn.redhat.com/errata/RHSA-2016-0726.html(Third Party Advisory)
http://www.debian.org/security/2016/dsa-3580(Mailing List, Third Party Advisory)
http://www.openwall.com/lists/oss-security/2016/05/03/18(Mailing List, Third Party Advisory)
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html(Third Party Advisory)
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html(Third Party Advisory)
http://www.securityfocus.com/archive/1/538378/100/0/threaded(Broken Link, Third Party Advisory, VDB Entry)
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.440568(Third Party Advisory)
http://www.ubuntu.com/usn/USN-2990-1(Third Party Advisory)
https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html(Mailing List, Third Party Advisory)
https://security.gentoo.org/glsa/201611-21(Third Party Advisory)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3718(US Government Resource)
https://www.exploit-db.com/exploits/39767/(Third Party Advisory, VDB Entry)
https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588(Vendor Advisory)
https://www.imagemagick.org/script/changelog.php(Release Notes)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain