Missing Auth in QuMagie 2.9.0 Fixed (CVE-2026-26236)
CVE-2026-26236 Published on June 9, 2026
QuMagie
A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions.
We have already fixed the vulnerability in the following version:
QuMagie 2.9.0 and later
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-26236 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-26236
Want to know whenever a new CVE is published for QNAP Qumagie? stack.watch will email you.
Affected Versions
QNAP Systems Inc. QuMagie:- Version 2.9.0 and below 2.9.0 is affected.