VYPR
← All advisories
High severity7.2NVD Advisory· Published Aug 29, 2025· Updated Jun 17, 2026

CVE-2025-29887

CVE-2025-29887

Description

A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands.

We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Qnap/Qurouter3 versions
    cpe:2.3:o:qnap:qurouter:2.5.0.140:build_20250227:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:qnap:qurouter:2.5.0.140:build_20250227:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qurouter:2.5.0.268:build_20250324:*:*:*:*:*:*
    • (no CPE)range: 2.5.1
  • QuRouter/QuRouterllm-fuzzy
    Range: 2.5.1
  • QNAP Systems Inc./QuRouterv5
    Range: 2.5.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.