mirror of
https://github.com/0x5t4l1n/CVE.git
synced 2026-05-26 19:26:32 +00:00
Stalin
24 lines
750 B
Markdown
24 lines
750 B
Markdown
|
|
|
|
# CVE-2026-41039 — Information Disclosure (Quantum Networks Router)
|
|
|
|
**Severity:** High (8.7)
|
|
**CWE:** CWE-306
|
|
|
|
## Summary
|
|
Missing authentication and improper access control expose internal API endpoints, allowing attackers to access sensitive data.
|
|
|
|
## Impact
|
|
- Information disclosure
|
|
- Exposure of internal endpoints, scripts, directories
|
|
|
|
## Fix
|
|
Enforce authentication, secure API endpoints, and harden default configurations.
|
|
|
|
## References
|
|
- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0200
|
|
- https://www.cve.org/CVERecord?id=CVE-2026-41039
|
|
|
|
## Credits
|
|
Rakesh Elamaran, Joel William A, Bajino Viju, Stalin S, Janish Andrin J, Kalpana B N
|