CVE-2026-44083

CriticalCVSS 9.8

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

37th percentile - higher than 37% of all known CVEs

Summary

QuMagie contains an authorization bypass vulnerability through a user-controlled key, allowing remote attackers to gain unintended privileges. The vulnerability is fixed in version 2.9.1.

Risk Assessment

Attackers can gain unauthorized access to QuMagie features, potentially leading to data confidentiality and integrity breaches.

Recommendation

Update QuMagie to version 2.9.1 or later.

Original NVD description (English source)

An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended privileges. We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later