ZDI-26-240 MEDIUM 6.3 Published Mar 30, 2026

QNAP QHora-322 qvpn_db_mgr role_type Improper Neutralization of Escape Sequences Authentication Bypass Vulnerability

QNAP

QNAP QHora-322 routers contain an authentication bypass vulnerability (CVE-2025-62845) that allows remote attackers to circumvent the device's existing login security controls. By exploiting this flaw, attackers could gain unauthorized access to the router's administrative functions and sensitive configuration data. Security teams should prioritize patching affected QHora-322 devices immediately and monitor for any suspicious remote access attempts to these systems.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy