From 5f7b07ea86b81f2f7514712ed433593c8b73c39f Mon Sep 17 00:00:00 2001 From: Stalin <161853795+Stalin-143@users.noreply.github.com> Date: Fri, 1 May 2026 22:03:46 +0530 Subject: [PATCH] Create CVE-2026-41037.md --- CVE-2026-41037.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 CVE-2026-41037.md diff --git a/CVE-2026-41037.md b/CVE-2026-41037.md new file mode 100644 index 0000000..ef26b73 --- /dev/null +++ b/CVE-2026-41037.md @@ -0,0 +1,23 @@ +![CVE](https://img.shields.io/badge/CVE-2026--41037-red) + +# CVE-2026-41037 — Missing Rate Limiting (Quantum Networks Router) + +**Severity:** High (8.7) +**CWE:** CWE-307 + +## Summary +Missing rate limiting in the router login allows brute-force attacks, leading to admin/root access. + +## Impact +- Full device compromise +- Unauthorized access + +## Fix +Add rate limiting, CAPTCHA, or account lockout. + +## References +- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0200 +- https://www.cve.org/CVERecord?id=CVE-2026-41037 + +## Credits +Rakesh Elamaran, Stalin S, Janish Andrin J, Kali Vignesh SM, Arkino Robilin R, Kalpana B N