CVE-2026-26236

6.6 mediumEPSS 0.3%

Medium (6.6) in qnap qumagie. EPSS 0.3% chance of exploitation in the next 30 days.

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later

Severity

CVSS 4.0

6.6 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2026-06-09
Modified: 2026-07-23
Record from: the NVD, synced 2026-10-19

Affected

qnap:qumagie

References

https://www.qnap.com/en/security-advisory/qsa-26-35

Check your stack JSON