CVE-2026-41036highCWE-78

CVE-2026-41036: fallo de gravedad alta en Quantum Networks Router QN-I-470

Command Injection Vulnerability in Quantum Networks Router QN-I-470

Publicada el

Seguir esta CVE+ Monitorear Router QN-I-470

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.7epss 0.4%
This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary OS commands on the targeted device. Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Quantum Networks · Router QN-I-470
CVEs relacionadas — Quantum Networks Router QN-I-470

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-41039HIGHInformation Disclosure Vulnerability in Quantum Networks Router QN-I-470EPSS 0.3%CVE-2026-41037HIGHMissing Rate Limiting Vulnerability in Quantum Networks Router QN-I-470EPSS 0.2%CVE-2026-41038HIGHWeak Password Policy Vulnerability in Quantum Networks Router QN-I-470EPSS 0.2%