CVE-2026-26237CWE-359CWE-862

QuMagie

Medium · published June 10, 2026

CVSS v4.0
6.6
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions.

We have already fixed the vulnerability in the following version:

QuMagie 2.9.0 and later

The record
Technical detail
CVSS v4.0
6.6 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
EPSS
0.00480 · 40.5th percentile
Weaknesses
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor; CWE-862 · Missing Authorization
Published
2026-06-10T03:15Z
EPSS history
Timeline
  • 10 JUN 03:15Z
    QuMagie
    cvelistv5