Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2025-62845

QuRouter

Description

An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to cause unexpected behavior. We have already fixed the vulnerability in the following version: QuRouter 2.6.3.009 and later

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QuRouter

Default version status: unaffected

  • 2.6.x to < 2.6.3.009affected

References