CVE-2026-41037 — Missing Rate Limiting Vulnerability in Quantum Networks Router QN-I-470

CVE-2026-41037

Missing Rate Limiting Vulnerability in Quantum Networks Router QN-I-470 PUBLISHED

Description (CNA)

This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative credentials, leading to unauthorized access with root privileges on the targeted device.

Affected (CNA)

Vendor / product	Versions
Quantum Networks / Router QN-I-470	affected at 6.1.1.B1

CWE

CWE-307

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0200

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.