Qumagie (Qnap) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 47 known versions, newest CVE from 2026-06-10. Vendor: Qnap.
CVEs of Qumagie
- CVE-2026-26237 - CVSS 7.5 (high), 2026-06-10: A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data…
- CVE-2026-44083 - CVSS 9.8 (critical), 2026-06-09: An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability…
- CVE-2026-26236 - CVSS 7.5 (high), 2026-06-09: A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data…
- CVE-2025-62857 - CVSS 6.1 (medium), 2026-01-02: A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security…
- CVE-2025-58464 - CVSS 7.8 (high), 2025-11-07: A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read the…
- CVE-2025-52425 - CVSS 9.8 (critical), 2025-11-07: An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands.…
- CVE-2024-38642 - CVSS 7.8 (high), 2024-09-06: An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to…
- CVE-2023-47559 - CVSS 5.5 (medium), 2024-01-05: A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject…
- CVE-2023-47219 - CVSS 8.8 (high), 2024-01-05: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code…
- CVE-2023-47560 - CVSS 8.8 (high), 2024-01-05: An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands…
- CVE-2023-41284 - CVSS 8.8 (high), 2023-11-10: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code…
- CVE-2023-39295 - CVSS 8.8 (high), 2023-11-10: An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands…
- CVE-2023-41285 - CVSS 8.8 (high), 2023-11-10: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code…