Qumagie (Qnap Systems Inc.) - vulnerabilities (CVEs)

14 CVEs, 2 in the last 30 days, 2 known versions, newest CVE from 2026-10-15. Vendor: Qnap Systems Inc..

CVEs of Qumagie

CVE-2026-50612 - CVSS 9.4 (critical), 2026-10-15: An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit…
CVE-2026-41545 - CVSS 8.6 (high), 2026-10-15: A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the…
CVE-2026-26237 - CVSS 7.5 (high), 2026-06-10: A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data…
CVE-2026-44083 - CVSS 9.8 (critical), 2026-06-09: An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability…
CVE-2026-26236 - CVSS 7.5 (high), 2026-06-09: A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data…
CVE-2025-62857 - CVSS 6.1 (medium), 2026-01-02: A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security…
CVE-2025-58464 - CVSS 7.8 (high), 2025-11-07: A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read the…
CVE-2025-52425 - CVSS 9.8 (critical), 2025-11-07: An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands.…
CVE-2024-38642 - CVSS 7.8 (high), 2024-09-06: An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to…
CVE-2023-47219 - CVSS 8.8 (high), 2024-01-05: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code…
CVE-2023-47560 - CVSS 8.8 (high), 2024-01-05: An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands…
CVE-2023-47559 - CVSS 5.5 (medium), 2024-01-05: A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject…
CVE-2023-41285 - CVSS 8.8 (high), 2023-11-10: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code…
CVE-2023-41284 - CVSS 8.8 (high), 2023-11-10: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code…
CVE-2023-39295 - CVSS 8.8 (high), 2023-11-10: An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands…