Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-50612

Import Symlink Following Remote Code Execution Vulnerability in QuMagie

An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuMagie 2.9.2 and later

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Qnap Systems Qnap Systems Inc.
Products
Qumagie Qumagie
CVE-2026-41545

WebSocket timelapse path traversal and command injection

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Qnap Systems Qnap Systems Inc.
Products
Qumagie Qumagie
CVE-2025-62857

QuMagie

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later

CVSS 4.0 · 2.2 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qumagie Qumagie