mirror of
https://github.com/0x5t4l1n/CVE.git
synced 2026-05-26 19:26:32 +00:00
Create CVE-2026-41037.md
This commit is contained in:
@@ -0,0 +1,23 @@
|
||||

|
||||
|
||||
# CVE-2026-41037 — Missing Rate Limiting (Quantum Networks Router)
|
||||
|
||||
**Severity:** High (8.7)
|
||||
**CWE:** CWE-307
|
||||
|
||||
## Summary
|
||||
Missing rate limiting in the router login allows brute-force attacks, leading to admin/root access.
|
||||
|
||||
## Impact
|
||||
- Full device compromise
|
||||
- Unauthorized access
|
||||
|
||||
## Fix
|
||||
Add rate limiting, CAPTCHA, or account lockout.
|
||||
|
||||
## References
|
||||
- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0200
|
||||
- https://www.cve.org/CVERecord?id=CVE-2026-41037
|
||||
|
||||
## Credits
|
||||
Rakesh Elamaran, Stalin S, Janish Andrin J, Kali Vignesh SM, Arkino Robilin R, Kalpana B N
|
||||
Reference in New Issue
Block a user