CVE-2026-41038
High · 8.8CVSS
8.8
EPSS
0.3%
Published
Apr 21, 2026
CISA due date
—
The record
This vulnerability exists in Quantum Networks router due to lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing password guessing or brute-force attacks against user accounts, leading to unauthorized access to the targeted device.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-85216 MISP contains an authentication bypass vulnerability in its LDAP and LinOTP… CWE-521
- CVE-2026-73778 A vulnerability exists in the Credential Manager component that may allow for… CWE-521
- CVE-2026-19293 SMP security request (from peripheral) does not include the maximum encryption key size… CWE-521
- CVE-2026-11493 A weakness has been identified in Tenda AC15 15.03.05.19. CWE-521
- CVE-2024-40684 IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0… CWE-521
- CVE-2026-9394 A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. CWE-521
- CVE-2026-6284 An attacker with network access to the PLC is able to brute force discover passwords to… CWE-521
- CVE-2026-33771 A Weak Password Requirements vulnerability in the password management function of Juniper… CWE-521