Skip to content
OpenAdvisories
Medium · 4.0 CVE-2025-62844 EUVD-2025-208897GHSA-5gfx-m376-wpjr

QuRouter

Published Mar 20, 2026 · Updated Mar 25, 2026 · Assigned by qnap

Description

A weak authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to gain sensitive information.

We have already fixed the vulnerability in the following version:
QuRouter 2.6.2.007 and later

Affected products

VendorProductAffectedFixed
QNAP Systems QuRouter 2.6.x – < 2.6.2.007 2.6.2.007

References