CVE-2025-62844: QuRouter
Published Mar 20, 2026
·Updated
A weak authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to gain sensitive information.
We have already fixed the vulnerability in the following version: QuRouter 2.6.2.007 and later
Affected Software
5 affected components
QHora
QuRouter<2.6.2.007
QNAP Qurouter=2.6.0.239-build_20250625
QNAP Qurouter=2.6.0.688-build_20250818
QNAP Qurouter=2.6.1.028-build_20251001
Remediation
Information
We have already fixed the vulnerability in the following version:
QuRouter 2.6.2.007 and later
Event History
Mar 20, 2026
CVE Published
via MITRE·04:21 PM
Data Sourced
via MITRE·04:21 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-62844?
CVE-2025-62844 is considered a high severity vulnerability due to its potential to expose sensitive information if exploited.
2
How do I fix CVE-2025-62844?
To fix CVE-2025-62844, update to QuRouter version 2.6.2.007 or later.
3
What does CVE-2025-62844 affect?
CVE-2025-62844 affects QHora devices, specifically those running QuRouter versions prior to 2.6.2.007.
4
What type of vulnerability is CVE-2025-62844?
CVE-2025-62844 is classified as a weak authentication vulnerability.
5
Can CVE-2025-62844 be exploited remotely?
No, CVE-2025-62844 requires local network access for an attacker to exploit the vulnerability.