Approved changes feed: RSS · Atom
cpe:2.3:a:qnap_systems_inc.:qurouter:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Qnap Systems Inc. (1f66ac1e-0889-51bf-b27f-24c7175e5920) |
|---|---|
| Product | Qurouter (7bdcd42d-b05c-5be1-a29d-7f92a31af6ce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24715 |
vulnerable | 2026-11-03 10:16:52.867067 |
Lack of Reproducible Vulnerability Evidence in QNAP Report
An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.
We have already fixed the vulnerability in the following version:
QuRouter 2.7.2.113 and later
Published: 2026-10-15T06:58:49.678Z
Updated: 2026-10-15T18:27:22.934Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68403 |
vulnerable | 2026-11-03 10:04:13.928036 |
Inadequate Steps to Confirm Vulnerability in QuRouter
An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit the vulnerability to modify data on the system.
We have already fixed the vulnerability in the following version:
QuRouter 2.7.2.113 and later
Published: 2026-10-15T06:58:16.820Z
Updated: 2026-10-15T18:32:58.755Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68404 |
vulnerable | 2026-11-03 10:04:12.645447 |
vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter management interface
A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.
We have already fixed the vulnerability in the following version:
QuRouter 2.6.4.001 and later
Published: 2026-10-15T06:58:27.256Z
Updated: 2026-10-15T18:32:25.154Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62846 |
vulnerable | 2026-06-08 07:39:16.754409 |
QuRouter
An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands.
We have already fixed the vulnerability in the following version:
QuRouter 2.6.2.007 and later
Published: 2026-03-20T16:21:46.008Z
Updated: 2026-03-25T14:03:08.625Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62845 |
vulnerable | 2026-06-08 07:39:16.753634 |
QuRouter
An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to cause unexpected behavior.
We have already fixed the vulnerability in the following version:
QuRouter 2.6.3.009 and later
Published: 2026-03-20T16:21:51.419Z
Updated: 2026-03-25T14:02:24.019Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62844 |
vulnerable | 2026-06-08 07:39:16.752994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62843 |
vulnerable | 2026-06-08 07:39:16.747047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29887 |
vulnerable | 2026-06-08 07:14:56.916615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-53700 |
vulnerable | 2026-06-08 06:54:15.340091 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50390 |
vulnerable | 2026-06-08 06:52:09.874045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50389 |
vulnerable | 2026-06-08 06:52:09.863965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48861 |
vulnerable | 2026-06-08 06:50:10.305690 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48860 |
vulnerable | 2026-06-08 06:50:10.299490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13088 |
vulnerable | 2026-06-08 06:25:36.683623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13087 |
vulnerable | 2026-06-08 06:25:36.675212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.