CVE-2026-26237
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A missing authorization vulnerability in QuMagie allows remote attackers to access unauthorized data or perform unauthorized actions. The issue is fixed in version 2.9.0.
Risk Assessment
An attacker can access sensitive data or perform operations without proper permissions, compromising system confidentiality and integrity.
Recommendation
Update QuMagie to version 2.9.0 or later.
Other vulnerabilities in QuMagie
See all- CVE-2026-44083Critical
QuMagie contains an authorization bypass vulnerability through a user-controlled key, allowing remote attackers to gain unintended privileges. The vulnerability is fixed in version 2.9.1.
- CVE-2026-26236High
A missing authorization vulnerability in QuMagie allows remote attackers to access unauthorized data or perform unauthorized actions. The issue is fixed in version 2.9.0.
Original NVD description (English source)
A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later