CVE-2026-24715Low· 1.3▾ SunlitAn observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 7.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.
We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-68404Medium· 4.8A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter
CVE-2025-68403Low· 1.0An external control of system or configuration setting vulnerability has been reported to affect QuRouter
CVE-2026-41544Medium· 6.3A path traversal vulnerability has been reported to affect QcalAgent
CVE-2026-39993Medium· 6.3A relative path traversal vulnerability has been reported to affect Download Station
CVE-2026-24723Low· 1.3A NULL pointer dereference vulnerability has been reported to affect File Station 5
CVE-2026-24722Low· 1.3A NULL pointer dereference vulnerability has been reported to affect File Station 5