CVE-2026-41037

CVE-2026-41037 is a brute force vulnerability affecting Quantum Networks routers, specifically targeting the web-based management interface due to the absence of rate limiting and CAPTCHA protections on failed login attempts. This flaw enables attackers positioned on the same network to conduct credential attacks against administrative accounts, potentially resulting in complete system compromise with root-level access. The vulnerability presents a network-based attack vector with low complexity, though the EPSS score of 0.00022 indicates relatively low exploitation probability in the wild. Currently, there is no evidence of active exploitation, the vulnerability is not listed on known exploit databases, and community attention appears minimal as indicated by its inactive status on vulnerability tracking lists. The FAUCET Risk Score of 42.0 out of 100 suggests moderate concern for organizations operating Quantum Networks equipment, particularly those with multiple devices on shared network segments.