What is GHSA-9q66-9qq3-h395?

GHSA-9q66-9qq3-h395 is a security advisory published by GitHub Security Advisories with High severity. An authorization bypass through user-controlled key vulnerability has been reported to affect...

Which CVE IDs does GHSA-9q66-9qq3-h395 cover?

GHSA-9q66-9qq3-h395 covers the following CVE IDs: CVE-2026-44083. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9q66-9qq3-h395?

GHSA-9q66-9qq3-h395 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-9q66-9qq3-h395HighCVSS 9.8

An authorization bypass through user-controlled key vulnerability has been reported to affect...

Vendor

GitHub Security Advisories

Published

June 9, 2026

Last Modified

June 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-44083 →

📋 Description

An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended privileges.

We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-44083
https://www.qnap.com/en/security-advisory/qsa-26-35
https://github.com/advisories/GHSA-9q66-9qq3-h395