CVE-2025-68403: QNAP Systems Inc Qurouter

Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days.

An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit the vulnerability to modify data on the system. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later

Affected products

• QNAP Systems Inc Qurouter: from 2.7, before 2.7.2.113 (fixed in 2.7.2.113)

Published 2026-10-15. Last modified 2026-10-15.