CVE-2026-26236CWE-862

QuMagie

Medium · published June 9, 2026

CVSS v4.0
6.6
EPSS
0%
Percentile
40.4
In the wild
Unconfirmed
What it is

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions.

We have already fixed the vulnerability in the following version:

QuMagie 2.9.0 and later

The record
Technical detail
CVSS v4.0
6.6 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
EPSS
0.00480 · 40.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-06-09T04:06Z
EPSS history
Timeline
  • 09 JUN 04:06Z
    QuMagie
    cvelistv5