Critical severity9.8NVD Advisory· Published Nov 7, 2025· Updated Jun 17, 2026

CVE-2025-52425

Description

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

QuMagie/QuMagiellm-fuzzy
Range: >=2.7.0
Qnap/QuMagiellm-fuzzy2 versions
>=2.7.0+ 1 more
- (no CPE)range: >=2.7.0
- cpe:2.3:a:qnap:qumagie:*:*:*:*:*:*:*:*range: >=2.6.0,<2.7.0
QNAP Systems Inc./Qumagiev5
Range: 2.7.x

Patches

Vulnerability mechanics

References

www.qnap.com/en/security-advisory/qsa-25-33nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000