CVE-2025-62857
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie.
Published Jan 2, 2026 · updated Oct 14, 2026 · qnap qumagie
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jan 2, 2026 · NIST NVD
Detected
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later
Oct 14, 2026 · NIST NVD
Updated
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later
Affected
- cpe qnap/qumagieversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2025-62857
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2025-62857
30-day exploitation probability 0.2%
first.org - NIST NVDVulnerability recordCVE-2025-62857
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and lat
nvd.nist.gov