CVE-2026-26236: QuMagie
Published Jun 9, 2026
·Updated
A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions.
We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later
Affected Software
2 affected components
QNAP Qumagie<2.9.0
QNAP Qumagie<2.9.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
QuMagieto a version that resolves this vulnerability.Fixed in 2.9.0
Event History
Jun 9, 2026
CVE Published
via MITRE·04:06 AM
Data Sourced
via MITRE·04:06 AM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:16 AM
DescriptionSeverityWeaknessAffected Software
Apr 23, 58430
Event
via NVD·11:21 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-26236?
The severity of CVE-2026-26236 is high with a CVSS score of 8.7.
2
How do I fix CVE-2026-26236?
To fix CVE-2026-26236, upgrade to QuMagie version 2.9.0 or later.
3
What type of vulnerability is CVE-2026-26236?
CVE-2026-26236 is a missing authorization vulnerability.
4
Who is affected by CVE-2026-26236?
CVE-2026-26236 affects users of QNAP QuMagie software.
5
What can attackers do with CVE-2026-26236?
Attackers can exploit CVE-2026-26236 to access unauthorized data or perform unauthorized actions.