CVE-2025-62844CWE-1390

QuRouter

Medium · published March 20, 2026

CVSS v4.0
4.0
EPSS
0%
Percentile
10.0
In the wild
Unconfirmed
What it is

A weak authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to gain sensitive information.

We have already fixed the vulnerability in the following version:

QuRouter 2.6.2.007 and later

The record
Technical detail
CVSS v4.0
4.0 · MEDIUM
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
EPSS
0.00205 · 10.0th percentile
Weakness
CWE-1390 · Weak Authentication
Published
2026-03-20T16:21Z
EPSS history
Timeline
  • 20 MAR 16:21Z
    QuRouter
    cvelistv5