QNAP Patches QuMagie Flaws Exposing Private Media Files

QNAP patched four vulnerabilities affecting QuMagie and License Center—three pre-authentication information-disclosure bugs in QuMagie that could let unauthenticated attackers access private photos, face-recognition thumbnails, and album archives, and a path-traversal issue in License Center requiring admin authentication; no in-the-wild exploitation has been reported and updates are available (QuMagie 2.9.1 / License Center 2.0.42).