Authorization Bypass in QuMagie by QNAP
CVE-2026-44083

8.7HIGH

Key Information:

Vendor

QNAP
Status
Qumagie
Vendor
CVE Published:
9 June 2026

What is CVE-2026-44083?

An authorization bypass vulnerability has been identified in QuMagie developed by QNAP, allowing remote attackers to exploit a user-controlled key. This flaw enables unauthorized users to gain unintended privileges, leading to potential security breaches. To mitigate this vulnerability, users are strongly advised to upgrade to QuMagie version 2.9.1 or later, where the issue has been addressed to enhance security protocols.

Affected Version(s)

QuMagie 2.9.0 < 2.9.1

References

https://www.qnap.com/en/security-advisory/qsa-26-35

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.