Verified

CVE-2025-68404: QuRouter 2.6.x to before 2.6.4.001

Affected technology

QuRouter · 2.6.x to before 2.6.4.001
QNAP Systems Inc.

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · No privileges required · Passive user interaction

What an attacker can do

The source says if exploited, the vulnerability could allow remote attackers to compromise the security of the system. Vendor/CNA’s CVSS 4.0 assessment (base score 7.5/10) rates confidentiality, integrity and availability impact as high.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-367
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 11:57:11.427822+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-68404.html