CVE-2026-41038
HighSummary
The vulnerability in Quantum Networks router is due to the lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing password guessing or brute-force attacks against user accounts, leading to unauthorized access to the targeted device.
Risk Assessment
The lack of strong password policies may lead to unauthorized access to devices on the network, posing a serious security threat to the organization.
Recommendation
It is recommended to implement strong password policies and regularly monitor and audit access to the router's management interface.
Other vulnerabilities in Router Quantum Networks
See all- CVE-2026-41039High
The vulnerability in Quantum Networks router is due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit this vulnerability by accessing exposed API endpoints on the targeted device.
- CVE-2026-41037High
The vulnerability in Quantum Networks router is due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative credentials, leading to unauthorized access with root privileges on the targeted device.
- CVE-2026-41036High
The vulnerability in Quantum Networks router arises from inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability to inject arbitrary OS commands on the targeted device.
Original NVD description (English source)
This vulnerability exists in Quantum Networks router due to lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing password guessing or brute-force attacks against user accounts, leading to unauthorized access to the targeted device.