CVE-2026-41036

CVE-2026-41036 is a command injection vulnerability in Quantum Networks routers stemming from insufficient input validation in the management CLI interface. An authenticated remote attacker can inject arbitrary operating system commands to achieve remote code execution with root-level privileges on affected devices. The vulnerability requires valid authentication credentials for exploitation, making it a network-adjacent attack vector with moderate complexity. Successful compromise would grant an attacker complete control over the router with the highest privilege level, potentially enabling further network infiltration, data interception, or service disruption. Current exploitation activity is minimal, with the vulnerability classified as inactive on public exploit lists and not included in the Known Exploited Vulnerabilities catalog. The EPSS score of 0.004 indicates low real-world exploitation probability, and the FAUCET risk score of 51.0/100 suggests moderate organizational concern. No publicly available exploit code has been documented at this time.