CVE-2026-24715
MediumCVSS 5.3Summary
An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.
Risk Assessment
An attacker may obtain sensitive information, potentially leading to further attacks and network security breaches.
Recommendation
Update QuRouter to version 2.7.2.113 or later. Monitor network traffic for unusual timing attack attempts.
Other vulnerabilities in QuRouter
See all- CVE-2025-68404High
A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.
- CVE-2025-68403Medium
An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit the vulnerability to modify data on the system. The vulnerability has been fixed in QuRouter 2.7.2.113 and later.
Original NVD description (English source)
An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later
Vulnerability data from NVD (NIST) · CISA KEV · EPSS