QNAP Systems Inc Qumagie vulnerabilities

2 CVEs affecting QNAP Systems Inc Qumagie, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-50612, published 2026-10-15.

More from QNAP Systems Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-41545, published 2026-10-15. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of…
• CVE-2026-50612, published 2026-10-15. Critical severity, CVSS 9.4. EPSS: 0.5% chance of exploitation in the next 30 days. An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the…