{"id":"CVE-2025-68403","published":"2026-10-15T07:17:57.000","lastModified":"2026-10-15T19:17:10.530","description":"An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit the vulnerability to modify data on the system.\n\nWe have already fixed the vulnerability in the following version:\nQuRouter 2.7.2.113 and later","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-15"],"vendors":[],"products":[],"references":[{"url":"https://www.qnap.com/en/release-notes/qurouter/overview/2.7","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}