CVE-2025-62844
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Mar 20, 2026
CISA due date
—
The record
A weak authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to gain sensitive information. We have already fixed the vulnerability in the following version: QuRouter 2.6.2.007 and later
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-73819 The affected Ebyte product's vendor configuration utility permits access to… CWE-1390
- CVE-2026-44476 Doorkeeper is an OAuth 2 provider for Ruby on Rails. CWE-1390
- CVE-2026-65098 NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow… CWE-1390
- CVE-2026-68067 The login endpoint on the Mira cloud API accepts any format-valid string in the password… CWE-1390
- CVE-2026-59135 Weak authentication in Microsoft Windows Search Component allows an authorized attacker… CWE-1390
- CVE-2026-55040 Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to… CWE-1390
- CVE-2026-0274 An improper validation of credentials vulnerability in the CommvaultSecurityIQ… CWE-1390
- CVE-2026-6274 Improper Authentication, Missing authentication for critical function, Weak… CWE-1390