Qurouter (Qnap Systems Inc.) - vulnerabilities (CVEs)
15 CVEs, 3 in the last 30 days, 2 known versions, newest CVE from 2026-10-15. Vendor: Qnap Systems Inc..
CVEs of Qurouter
- CVE-2026-24715 - CVSS 5.3 (medium), 2026-10-15: An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain…
- CVE-2025-68404 - CVSS 7.5 (high), 2026-10-15: A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote…
- CVE-2025-68403 - CVSS 4.6 (medium), 2026-10-15: An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account,…
- CVE-2025-62846 - CVSS 7.3 (high), 2026-03-20: An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability…
- CVE-2025-62844 - CVSS 5.5 (medium), 2026-03-20: A weak authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to…
- CVE-2025-62843 - CVSS 6.8 (medium), 2026-03-20: An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gains physical access,…
- CVE-2025-62845 - CVSS 6.7 (medium), 2026-03-20: An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an administrator…
- CVE-2025-29887 - CVSS 7.2 (high), 2025-08-29: A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the…
- CVE-2024-13088 - CVSS 7.8 (high), 2025-06-06: An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability…
- CVE-2024-13087 - CVSS 6.7 (medium), 2025-06-06: A command injection vulnerability has been reported to affect QHora. If an attacker gains local network access who have also gained an administrator account,…
- CVE-2024-53700 - CVSS 7.2 (high), 2025-03-07: A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained…
- CVE-2024-50390 - CVSS 9.8 (critical), 2025-03-07: A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary…
- CVE-2024-50389 - CVSS 9.8 (critical), 2024-12-06: A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious code. We…
- CVE-2024-48861 - CVSS 7.8 (high), 2024-11-22: An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network…
- CVE-2024-48860 - CVSS 9.8 (critical), 2024-11-22: An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to…
