A relative path traversal vulnerability has been reported to affect QuMagie.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 15, 2026 · NIST NVD

   Detected

   A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later

2. Oct 15, 2026 · NIST NVD

   Updated

   A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later

Affected

• vendor QNAP Systems Inc. QuMagieversion unspecified

Sources

• CIRCL Vulnerability LookupVulnerability recordCVE-2026-41545

  A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the follow

  vulnerability.circl.lu
• CVE.orgVulnerability recordCVE-2026-41545

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-41545

  30-day exploitation probability 0.5%

  first.org
• NIST NVDVulnerability recordCVE-2026-41545

  A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the follo

  nvd.nist.gov

References

• Reference · qnap.com