CVE-2026-41039
HighSummary
The vulnerability in Quantum Networks router is due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit this vulnerability by accessing exposed API endpoints on the targeted device.
Risk Assessment
Successful exploitation of this vulnerability could allow the attacker to access sensitive information, including internal endpoints, scripts, and directories on the targeted device.
Recommendation
It is recommended to review and enhance the security configuration of the management interface and implement appropriate access control mechanisms for the API endpoints.
Other vulnerabilities in Router Quantum Networks
See all- CVE-2026-41038High
The vulnerability in Quantum Networks router is due to the lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing password guessing or brute-force attacks against user accounts, leading to unauthorized access to the targeted device.
- CVE-2026-41037High
The vulnerability in Quantum Networks router is due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative credentials, leading to unauthorized access with root privileges on the targeted device.
- CVE-2026-41036High
The vulnerability in Quantum Networks router arises from inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability to inject arbitrary OS commands on the targeted device.
Original NVD description (English source)
This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit this vulnerability by accessing exposed API endpoints on the targeted device. Successful exploitation of this vulnerability could allow the attacker to access sensitive information, including internal endpoints, scripts and directories on the targeted device.