CVE-2026-41036
HighSummary
The vulnerability in Quantum Networks router arises from inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability to inject arbitrary OS commands on the targeted device.
Risk Assessment
Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device, posing a serious security threat to the organization.
Recommendation
It is recommended to update the Quantum Networks router firmware and implement additional security measures to mitigate the risk associated with command injection.
Other vulnerabilities in Router Quantum Networks
See all- CVE-2026-41039High
The vulnerability in Quantum Networks router is due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit this vulnerability by accessing exposed API endpoints on the targeted device.
- CVE-2026-41038High
The vulnerability in Quantum Networks router is due to the lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing password guessing or brute-force attacks against user accounts, leading to unauthorized access to the targeted device.
- CVE-2026-41037High
The vulnerability in Quantum Networks router is due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative credentials, leading to unauthorized access with root privileges on the targeted device.
Original NVD description (English source)
This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary OS commands on the targeted device. Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device.