QNAP QuRouter 2.6.2.007 Build 20251027

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qurouter:2.6.2.007:build_20251027:*:*:*:*:*:*

part: o version: 2.6.2.007 update: build_20251027

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQurouter (c48d013c-8e0a-51e2-bb36-851502ee597b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62845 vulnerable 2026-06-08 07:39:16.754000 QuRouter
An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to cause unexpected behavior. We have already fixed the vulnerability in the following version: QuRouter 2.6.3.009 and later
Published: 2026-03-20T16:21:51.419Z
Updated: 2026-03-25T14:02:24.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62843 vulnerable 2026-06-08 07:39:16.752376 QuRouter
An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gains physical access, they can then exploit the vulnerability to gain the privileges that were intended for the original endpoint. We have already fixed the vulnerability in the following version: QuRouter 2.6.3.009 and later
Published: 2026-03-20T16:22:02.680Z
Updated: 2026-03-25T14:01:14.557Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.