PT-2026-33926 · Quantum Networks · Quantum Networks Router

Arkino Robilin R + 5 · Published 2026-04-21 · Updated 2026-04-21 · CVE-2026-41037

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Quantum Networks router (affected versions not specified)

Description The web-based management interface lacks rate limiting and CAPTCHA protection for failed login attempts. This allows an attacker on the same network to perform brute force attacks against administrative credentials to gain unauthorized root access. Additionally, the management CLI is susceptible to command injection, which can lead to remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-78

CWE-307

Related Identifiers

CVE-2026-41037

Affected Products

Quantum Networks Router

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-41037 · Security Note
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0200 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2046538598862721208 · Twitter Post
• https://twitter.com/CVEnew/status/2046571841746272560 · Twitter Post