HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2023-47560

CVSS 7.4v3.1pub. 2024-01-05upd. 2024-11-21

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

  • Qnap Qumagie

    APP
    Qnap
    2.2.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2025-52425CRITICAL9.5PL ✓ten sam produkt

SQL Injection w QNAP QuMagie umożliwiający zdalne wykonanie kodu

CVE-2026-26237HIGH8.7ten sam produkt

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then explo...

CVE-2026-44083HIGH8.7ten sam produkt

An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The rem...

CVE-2026-26236HIGH8.7ten sam produkt

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then explo...

CVE-2025-58464HIGH7.8ten sam produkt

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can th...