Skip to content
OpenAdvisories
Low · 2.2 CVE-2025-62857 EUVD-2026-0682GHSA-mwv4-qf7c-vfg5

QuMagie

Published Jan 2, 2026 · Updated Jan 5, 2026 · Assigned by qnap

Description

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following version:
QuMagie 2.8.1 and later

Affected products

VendorProductAffectedFixed
QNAP Systems QuMagie 2.x – < 2.8.1 2.8.1

References