CVE-2026-26237Disclosure(qnap / qumagie)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-359CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • qumagie

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-06-10); latest day: 1
  • 4 total mentions across 2 days

Affected systems

Vendors
Products
qumagie

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-06-10: 3Mentions · 2026-07-01: 1Technical Details · 2026-06-10: 306-1007-01
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-06-103
Disclosure3
2026-07-011
General1
Full discourse4 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos QNAP ❗ CVE-2026-44083 ❗ CVE-2026-26237 ❗ CVE-2026-26236 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-qnap-5/ https://t.co/nngHyIoVl4

    Post summary

    The post lists QNAP CVEs and provides links for more information, but contains no PoC, exploit code, patch details, or technical specifics.

    01010223
    6.7K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-26237 A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perf… https://www.cve.org/CVERecord?id=CVE-2026-26237 ----- Traducción: CVE-2026-26237 Se … http://infoflow.cloud`

    Post summary

    A missing authorization vulnerability (CVE‑2026‑26237) affecting QuMagie has been reported, providing basic technical details but no evidence of PoC, exploitation, or patches.

    0000022
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-26237 A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perf… https://www.cve.org/CVERecord?id=CVE-2026-26237

    Post summary

    A missing authorization vulnerability (CVE-2026-26237) has been disclosed for QuMagie, allowing remote attackers to access unauthorized data; no PoC, exploit, or patch details are provided.

    00000302
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-26237 Missing Authorization Vulnerability in QuMagie Before Version 2.9... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26237 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    An alert announces a missing‑authorization vulnerability (CVE‑2026‑26237) affecting QuMagie versions prior to 2.9, directing readers to a vulnerability page and subscription link for updates.

    0000056
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appqnapqumagie---

Explore more