CveMateVulnerability intelligence

Qnap Qumagie vulnerabilities

13 vulnerabilities

Known vulnerabilities in Qnap Qumagie, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2025-52425qnap systems inc.qumagie+111mo ago07-11-2025 15:15

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later CVE-2025-62857qnap systems inc.qumagie+19mo ago02-01-2026 14:51

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later CVE-2025-58464qnap systems inc.qumagie+111mo ago07-11-2025 15:10

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.7.3 and later CVE-2024-38642qnap systems inc.qumagie+12y ago06-09-2024 16:29

An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in the following version: QuMagie 2.3.1 and later CVE-2026-26237qnap systems inc.qumagie+14mo ago10-06-2026 03:15

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later CVE-2026-26236qnap systems inc.qumagie+14mo ago09-06-2026 04:06

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later CVE-2026-44083qnap systems inc.qumagie+14mo ago09-06-2026 06:20

An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended privileges. We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later CVE-2023-41284qnap systems inc.qumagie+12y ago10-11-2023 16:01

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later CVE-2023-41285qnap systems inc.qumagie+12y ago10-11-2023 16:02

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later CVE-2023-47560qnap systems inc.qumagie+12y ago05-01-2024 16:18

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later CVE-2023-47559qnap systems inc.qumagie+12y ago05-01-2024 16:18

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later CVE-2023-47219qnap systems inc.qumagie+12y ago05-01-2024 16:18

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later CVE-2023-39295qnap systems inc.qumagie+12y ago10-11-2023 16:01

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later