CVE-2026-41037
HighSummary
The vulnerability in Quantum Networks router is due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative credentials, leading to unauthorized access with root privileges on the targeted device.
Risk Assessment
The organization is at risk of unauthorized access to network devices, which could lead to serious security breaches and data loss.
Recommendation
It is recommended to implement rate limiting and CAPTCHA mechanisms in the management interface to minimize the risk of brute force attacks.
Other vulnerabilities in Router Quantum Networks
See all- CVE-2026-41039High
The vulnerability in Quantum Networks router is due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit this vulnerability by accessing exposed API endpoints on the targeted device.
- CVE-2026-41038High
The vulnerability in Quantum Networks router is due to the lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing password guessing or brute-force attacks against user accounts, leading to unauthorized access to the targeted device.
- CVE-2026-41036High
The vulnerability in Quantum Networks router arises from inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability to inject arbitrary OS commands on the targeted device.
Original NVD description (English source)
This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative credentials, leading to unauthorized access with root privileges on the targeted device.