Medium severity6.1NVD Advisory· Published Jan 2, 2026· Updated Jun 17, 2026

CVE-2025-62857

Description

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data.

We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Qnap/QuMagie2 versions
cpe:2.3:a:qnap:qumagie:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:qnap:qumagie:*:*:*:*:*:*:*:*range: >=2.0.0,<2.8.1
- (no CPE)range: >=2.8.1
QuMagie/QuMagiellm-fuzzy
Range: >=2.8.1
QNAP Systems Inc./Qumagiev5
Range: 2.x

Patches

Vulnerability mechanics

References

www.qnap.com/en/security-advisory/qsa-25-49nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000