CVE-2026-41039 HIGH

CVE-2026-41039: Information Disclosure Vulnerability in Quantum Networks Router QN-I-470

Vendor Quantum Networks
Product Router QN-I-470
Weakness CWE-306 · Missing auth
Published April 21, 2026
Last update April 21, 2026
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit this vulnerability by accessing exposed API endpoints on the targeted device. Successful exploitation of this vulnerability could allow the attacker to access sensitive information, including internal endpoints, scripts and directories on the targeted device.

Key dates

02Disclosure timeline

April 21, 2026 CVE published
April 21, 2026 Record updated