CVE-2025-68404Medium· 4.8▾ SunlitA time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vul…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 26.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.
We have already fixed the vulnerability in the following version: QuRouter 2.6.4.001 and later
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-24715Medium· 5.3An observable timing discrepancy vulnerability has been reported to affect QuRouter
CVE-2025-68403Medium· 4.6An external control of system or configuration setting vulnerability has been reported to affect QuRouter
CVE-2026-23950High· 8.8node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3
CVE-2026-34006Critical· 9.3Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer
CVE-2026-26244High· 7.1SQLi#1 SQL Injection in class_videos.php _getFilters
CVE-2026-26243High· 7.2Arbitrary Folder Deletion in Qsync Central 5.0.0.5