QNAP QHora-322 login.newAuthMiddleware.Authenticator Authentication Bypass Vulnerability

QNAP QHora-322 routers contain an authentication bypass vulnerability (CVE-2025-62844) that allows remote attackers to access the device without valid credentials. Attackers can exploit this flaw to gain unauthorized access to the router's administrative functions and potentially compromise network security. Security teams should immediately apply any available patches from QNAP, restrict network access to affected routers, and monitor for suspicious authentication attempts or unauthorized access.