PT-2026-1090 · Qumagie · Qumagie

Tim Coen · CVE-2025-62857 · Published 2026-01-02 · Updated 2026-01-05

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions QuMagie versions prior to 2.8.1

Description A cross-site scripting (XSS) issue exists in QuMagie. This allows remote attackers to potentially bypass security measures or access application data.

Recommendations Update to QuMagie version 2.8.1 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-62857

Affected Products

Qumagie

References · 7

• https://osv.dev/vulnerability/CVE-2025-62857 · Vendor Advisory
• https://qnap.com/en/security-advisory/qsa-25-49 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62857 · Security Note
• https://t.me/cveNotify/147764 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2007119238352281766 · Twitter Post
• https://twitter.com/CVEnew/status/2007118443955519821 · Twitter Post
• https://t.me/CVEtracker/41232 · Telegram Post