CVE-2026-44083CWE-639

QuMagie

High · published June 9, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended privileges.

We have already fixed the vulnerability in the following version:

QuMagie 2.9.1 and later

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00611 · 48.6th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-06-09T06:20Z
EPSS history
Timeline
  • 09 JUN 06:20Z
    QuMagie
    cvelistv5