CVE-2025-49901: Quantumcloud Simple Link Directory

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Authentication Abuse.This issue affects Simple Link Directory: from n/a through < 14.8.1.

Affected products

• Quantumcloud Simple Link Directory: up to and including 14.8.1

Published 2025-10-22. Last modified 2026-10-08.