CVE-2026-26237: QuMagie
A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions.
We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
QuMagieto a version that resolves this vulnerability.Fixed in 2.9.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-26237?
CVE-2026-26237 has a high severity rating of 8.7 according to the CVSS scoring system.
How do I fix CVE-2026-26237?
To fix CVE-2026-26237, upgrade to QuMagie version 2.9.0 or later.
What type of vulnerability is CVE-2026-26237?
CVE-2026-26237 is a missing authorization vulnerability that allows remote attackers to access unauthorized data.
Can CVE-2026-26237 affect my data security?
Yes, CVE-2026-26237 can potentially expose unauthorized access to sensitive data.
When was CVE-2026-26237 published?
CVE-2026-26237 was published on June 10, 2026.