CVE-2025-62844

MEDIUM

5.5

Descricao

A weak authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to gain sensitive information. We have already fixed the vulnerability in the following version: QuRouter 2.6.2.007 and later

Detalhes CVE

Pontuacao CVSS v3.15.5

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado3/20/2026

Ultima modificacao4/14/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

qnap:qurouter

Fraquezas (CWE)

CWE-1390

Referencias

https://www.qnap.com/en/security-advisory/qsa-26-12(security@qnapsecurity.com.tw)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.