CVE-2026-26236Disclosure(qnap / qumagie)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • qumagie

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-28); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
qumagie

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-28: 1Mentions · 2026-07-01: 106-2807-01
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-281
Disclosure1
2026-07-011
General1
Full discourse2 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos QNAP ❗ CVE-2026-44083 ❗ CVE-2026-26237 ❗ CVE-2026-26236 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-qnap-5/ https://t.co/nngHyIoVl4

    Post summary

    The tweet announces three QNAP CVEs and provides a link for further details, but offers no proof‑of‑concept, exploitation, patch, or technical specifics.

    01010223
    6.7K followersView on X
  • BREACHSPIDER@breachspider
    Disclosure

    [CVE Analysis] CVE-2026-26236: Missing Authorization in QNAP QuMagie Exposes NAS-Adjacent OT Data Stores https://breachspider.com/intel/2026-06-28-cve-2026-26236-missing-authorization-in-qnap-qumagie-exposes #ICS #OTSecurity #SCADA #CriticalInfrastructure

    Post summary

    The article announces a missing authorization flaw in QNAP QuMagie that could expose OT data, but no PoC, exploit, patch, or evidence of active exploitation is provided.

    0000082
    2.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appqnapqumagie---

Explore more