Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: QNAP Component: Qumagie Clear all filters
TI-2026-21227 CVE-2026-26237 · GHSA-j3pp-x9pg-8vx4

Missing authorization in QNAP QuMagie

Priority LOW 35

A missing authorization vulnerability has been reported to affect QuMagie.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00322 Published 2026-06-10 Fixed in 2.9.1 CWE-359
TI-2026-32102 CVE-2026-44083 · GHSA-9q66-9qq3-h395

Authorization bypass in QNAP QuMagie

Priority MEDIUM 44

An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0046 Published 2026-06-09 Fixed in 2.9.1 CWE-639
TI-2026-21226 CVE-2026-26236 · GHSA-xxxj-w44j-q5cf

Missing authorization in QNAP QuMagie

Priority LOW 29

A missing authorization vulnerability has been reported to affect QuMagie.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00322 Published 2026-06-09 Fixed in 2.9.1 CWE-862
TI-2025-39010 CVE-2025-62857 · GHSA-mwv4-qf7c-vfg5

Cross-site scripting in QNAP QuMagie

Priority LOW 17

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie.

CVSS 4.0LOW 2.2 Network No auth User interaction EPSS 0.00223 Published 2026-01-02 Fixed in 2.8.1 CWE-79
TI-2025-32562 CVE-2025-52425 · GHSA-6f3w-7q37-9xgc

SQL injection in QNAP QuMagie

Priority MEDIUM 43

An SQL injection vulnerability has been reported to affect QuMagie.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.0042 Published 2025-11-07 Fixed in 2.7.0 CWE-89
TI-2025-36221 CVE-2025-58464 · GHSA-p9v7-8x2v-h926

Path traversal in QNAP QuMagie

Priority MEDIUM 41

A relative path traversal vulnerability has been reported to affect QuMagie.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00529 Published 2025-11-07 Fixed in 2.7.3 CWE-23
TI-2024-25877 CVE-2024-38642 · GHSA-78c9-5p24-9jcg

Improper certificate validation in QNAP QuMagie

Priority LOW 5

An improper certificate validation vulnerability has been reported to affect QuMagie.

CVSS 4.0LOW 1.0 Physical No auth No interaction EPSS 0.00096 Published 2024-09-06 Fixed in 2.3.1 CWE-295
TI-2023-25537 CVE-2023-47219 · GHSA-q6m8-qqcx-ww7p

SQL injection in QNAP QuMagie

Priority MEDIUM 41

A SQL injection vulnerability has been reported to affect QuMagie.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.005 Published 2024-01-05 Fixed in 2.2.1 CWE-89
TI-2023-25727 CVE-2023-47559 · GHSA-xwq3-6vm6-9m42

Cross-site scripting in QNAP QuMagie

Priority LOW 25

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00298 Published 2024-01-05 Fixed in 2.2.1 CWE-79
TI-2023-25728 CVE-2023-47560 · GHSA-3w95-fv8q-2wr8

Command injection in QNAP QuMagie

Priority MEDIUM 42

An OS command injection vulnerability has been reported to affect QuMagie.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01125 Published 2024-01-05 Fixed in 2.2.1 CWE-77
TI-2023-21887 CVE-2023-41285 · GHSA-hc34-vgpq-wg4g

SQL injection in QNAP QuMagie

Priority LOW 39

A SQL injection vulnerability has been reported to affect QuMagie.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00542 Published 2023-11-10 Fixed in 2.1.4 CWE-89
TI-2023-21886 CVE-2023-41284 · GHSA-gm76-8p6q-7q3p

SQL injection in QNAP QuMagie

Priority LOW 39

A SQL injection vulnerability has been reported to affect QuMagie.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00542 Published 2023-11-10 Fixed in 2.1.4 CWE-89
TI-2023-20439 CVE-2023-39295 · GHSA-72j3-3gqw-xqfj

OS command injection in QNAP QuMagie

Priority MEDIUM 44

An OS command injection vulnerability has been reported to affect QuMagie.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01742 Published 2023-11-10 Fixed in 2.1.3 CWE-78