Approved changes feed: RSS · Atom
cpe:2.3:a:qnap_systems_inc.:qumagie:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Qnap Systems Inc. (1f66ac1e-0889-51bf-b27f-24c7175e5920) |
|---|---|
| Product | Qumagie (2fe6f95c-d54b-5e8b-8001-e93b0252eb93) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-50612 |
vulnerable | 2026-11-03 10:17:41.551740 |
Import Symlink Following Remote Code Execution Vulnerability in QuMagie
An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system.
We have already fixed the vulnerability in the following version:
QuMagie 2.9.2 and later
Published: 2026-10-15T09:31:41.898Z
Updated: 2026-10-15T13:44:26.606Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41545 |
vulnerable | 2026-11-03 10:17:05.458956 |
WebSocket timelapse path traversal and command injection
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
We have already fixed the vulnerability in the following version:
QuMagie 2.9.1 and later
Published: 2026-10-15T09:31:05.937Z
Updated: 2026-10-15T13:45:00.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44083 |
vulnerable | 2026-07-29 00:52:14.045770 |
QuMagie
An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended privileges.
We have already fixed the vulnerability in the following version:
QuMagie 2.9.1 and later
Published: 2026-06-09T06:20:47.247Z
Updated: 2026-06-09T13:10:16.398Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26237 |
vulnerable | 2026-07-29 00:34:58.588109 |
QuMagie
A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions.
We have already fixed the vulnerability in the following version:
QuMagie 2.9.0 and later
Published: 2026-06-10T03:15:03.739Z
Updated: 2026-06-17T01:54:01.266Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26236 |
vulnerable | 2026-07-29 00:34:58.587922 |
QuMagie
A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions.
We have already fixed the vulnerability in the following version:
QuMagie 2.9.0 and later
Published: 2026-06-09T04:06:37.135Z
Updated: 2026-06-17T01:53:39.022Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62857 |
vulnerable | 2026-06-08 07:39:16.869248 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58464 |
vulnerable | 2026-06-08 07:35:18.338993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52425 |
vulnerable | 2026-06-08 07:31:11.510643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38642 |
vulnerable | 2026-06-08 06:41:47.819407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47560 |
vulnerable | 2026-06-08 06:14:24.995508 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47559 |
vulnerable | 2026-06-08 06:14:24.994984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47219 |
vulnerable | 2026-06-08 06:14:24.468920 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41285 |
vulnerable | 2026-06-08 06:11:05.834617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41284 |
vulnerable | 2026-06-08 06:11:05.833330 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39295 |
vulnerable | 2026-06-08 06:09:36.855720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.