PT-2026-33929 · Quantum Networks · Quantum Networks Router

Published 2026-04-21 · Updated 2026-04-21 · CVE-2026-41039

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Quantum Networks router (affected versions not specified)

Description Improper access control and insecure default configuration in the web-based management interface allow an unauthenticated attacker to access exposed API endpoints. This could lead to the exposure of sensitive information, including internal endpoints, scripts, and directories on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-41039

Affected Products

Quantum Networks Router

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-41039 · Security Note
• https://twitter.com/CVEnew/status/2046571838520852871 · Twitter Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0200 · Note
• https://twitter.com/VulmonFeeds/status/2046553965727285297 · Twitter Post