QNAP QHora Weak Authentication Vulnerability Allowing Information Disclosure
Vulnerability
A weak authentication vulnerability exists in QNAP QHora QuRouter versions 2.6.x. This vulnerability allows an attacker with local network access to exploit the authentication weakness and gain sensitive information.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive information.
Remediation
Users can update to QNAP QuRouter version 2.6.3.009 or later to address this vulnerability. Instructions for updating QuRouter are available on the QNAP website.
Added: Mar 20, 2026, 5:23 PM
Updated: Mar 20, 2026, 5:23 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.9remediation
0.0relevance
4.2threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.