CVE-2026-41039

Received Received - Intake

Improper Access Control in Quantum Networks Router Exposes Sensitive Data

Publication date: 2026-04-21

Last updated on: 2026-05-06

Assigner: Indian Computer Emergency Response Team (CERT-In)

Description

This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit this vulnerability by accessing exposed API endpoints on the targeted device. Successful exploitation of this vulnerability could allow the attacker to access sensitive information, including internal endpoints, scripts and directories on the targeted device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-21

Last Modified

2026-05-06

Generated

2026-07-06

AI Q&A

2026-04-22

EPSS Evaluated

2026-07-05

NVD

CVE-2026-41039

EUVD

EUVD-2026-24084

Affected Vendors & Products

Vendor	Product	Version / Range
qntmnet	qn-i-470_firmware	6.1.1.b1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Compliance Impact

This vulnerability allows an unauthenticated attacker to access sensitive information on the targeted device due to improper access control and insecure default configuration.

Such unauthorized access to sensitive information could potentially lead to non-compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive data and strict access controls.

Executive Summary

This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface.

An unauthenticated attacker could exploit this vulnerability by accessing exposed API endpoints on the targeted device.

Successful exploitation could allow the attacker to access sensitive information, including internal endpoints, scripts, and directories on the targeted device.

Impact Analysis

Exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information stored on the Quantum Networks router.

Access to internal endpoints
Access to scripts
Access to directories on the targeted device

This could lead to further attacks or compromise of the network managed by the device.

Hi! I’m here to help you understand CVE-2026-41039. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70