Vulnerability · Published Apr 21, 2026 · Assigned by CERT-In

CVE-2026-41037Missing Rate Limiting Vulnerability in Quantum Networks Router QN-I-470

High 8.7

In plain English

A high-severity security flaw in Router QN-I-470 from Quantum Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)0.2%top 90.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative credentials, leading to unauthorized access with root privileges on the targeted device.

Affected products (as reported)

Vendor	Product	Versions
Quantum Networks	Router QN-I-470	at 6.1.1.B1

Weakness: CWE-307 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0200 third-party-advisory