Known vulnerabilities in QuMagie

Software: QuMagie
Software CPE: cpe:2.3:a:qnap_systems:qumagie:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QuMagie QuMagie is affected by 13 known vulnerabilities: 2 high, 8 medium, 3 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134891 - Authorization Bypass Through User-Controlled Key
CVE-2026-44083
CWE-639 High
No
No
2.9.1, 2.10.0 19.06.2026 SB2026061903
#VU134890 - Exposure of Private Information ('Privacy Violation')
CVE-2026-26237
CWE-359 Medium
No
No
2.9.1, 2.10.0 19.06.2026 SB2026061903
#VU134884 - Missing Authorization
CVE-2026-26236
CWE-862 Medium
No
No
2.9.1, 2.10.0 19.06.2026 SB2026061903
#VU120916 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-62857
CWE-79 Low
No
No
2.8.1 05.01.2026 SB2026010564
#VU118209 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-58464
CWE-22 Medium
No
No
2.7.3 10.11.2025 SB2025111032
#VU118208 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-52425
CWE-89 High
No
No
2.7.0 10.11.2025 SB2025111033
#VU96943 - Improper Certificate Validation
CVE-2024-38642
CWE-295 Low
No
No
2.3.1 09.09.2024 SB2024090913
#VU85053 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-47560
CWE-78 Medium
No
No
2.2.1 08.01.2024 SB2024010802
#VU85052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-47559
CWE-79 Low
No
No
2.2.1 08.01.2024 SB2024010802
#VU85051 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-47219
CWE-89 Medium
No
No
2.2.1 08.01.2024 SB2024010802
#VU83002 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-41285
CWE-89 Medium
No
No
2.1.4 13.11.2023 SB2023111306
#VU83001 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-41284
CWE-89 Medium
No
No
2.1.4 13.11.2023 SB2023111306
#VU83000 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-39295
CWE-78 Medium
No
No
2.1.4 13.11.2023 SB2023111306