QwikSec

Security Database

CVE

CWE

Training

CVE-2025-29887

Published: Aug 29, 2025

Modified: Aug 29, 2025

PUBLISHED

Description

A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later

Vendor	Product	Versions
QNAP Systems Inc.	QuRouter	affected `2.5.x - < 2.5.1.060`

Weaknesses (CWE)

References

https://www.qnap.com/en/security-advisory/qsa-25-25

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.