Observable Timing Discrepancy in QuRouter by QNAP
CVE-2026-24715

5.3MEDIUM

Key Information:

Vendor

QNAP
Status
Qurouter
Vendor
CVE Published:
15 October 2026

What is CVE-2026-24715?

A timing discrepancy vulnerability has been identified in QuRouter, allowing remote attackers to exploit this weakness and potentially gain access to sensitive data. This vulnerability emphasizes the importance of upgrading to version 2.7.2.113 or later, which includes necessary fixes to mitigate any risks associated with this security flaw.

Affected Version(s)

QuRouter 2.7.x < 2.7.2.113

References

https://www.qnap.com/en/release-notes/qurouter/overview/2.7
release-notes

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

蔡佳芳
.