Skip to content
OpenAdvisories
Critical · 9.5 CVE-2025-52425 EUVD-2025-38284GHSA-6f3w-7q37-9xgc

QuMagie

Published Nov 7, 2025 · Updated Nov 7, 2025 · Assigned by qnap

Description

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerability in the following versions:
QuMagie 2.7.0 and later

Affected products

VendorProductAffectedFixed
QNAP Systems QuMagie 2.7.x – < 2.7.0 2.7.0

References