Cyber Resilience

CVE-2025-62845

Qnap Qurouter 2.6.0.239 … 2.6.2.007

Published
20 March 2026
Modified
14 April 2026
Patch / advisory
View advisory
CVSS Score v4 5.6
Click a component to see what it means
Raw vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0018 8th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2025-62845 is a medium-severity Improper Neutralization of Escape, Meta, or Control Sequences (CWE-150) vulnerability in Qnap Qurouter. Its CVSS base score is 5.6 (Medium).

Operationally, ranked at the 8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SI-10 (Information Input Validation) and SI-2 (Flaw Remediation) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to cause unexpected behavior. We have already fixed the vulnerability…

more

in the following version: QuRouter 2.6.3.009 and later

CWE(s)
CWE-150

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

Insufficient information to map techniques.
Confidence: LOW · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2024-48860Same product: Qnap Qurouter
CVE-2024-48861Same product: Qnap Qurouter
CVE-2024-50390Same product: Qnap Qurouter
CVE-2024-13088Same product: Qnap Qurouter
CVE-2025-29887Same product: Qnap Qurouter
CVE-2024-53700Same product: Qnap Qurouter
CVE-2024-13087Same product: Qnap Qurouter
CVE-2024-50389Same product: Qnap Qurouter
CVE-2025-62843Same product: Qnap Qurouter
CVE-2025-62844Same product: Qnap Qurouter

Affected Assets

qnap
qurouter
2.6.0.239, 2.6.0.688, 2.6.1.028, 2.6.2.007

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SI-10 Information Input Validation
  • SI-2 Flaw Remediation
Detect
Catch it (NIST detect / respond)
  • SI-7 Software, Firmware, and Information Integrity
Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)
  • V1.2.10
  • V1.3.12

Mitigating Controls (NIST 800-53 r5) AI

SI-10 Information Input Validation good match
prevent

Directly requires validation and neutralization of untrusted input to block escape/meta/control sequence injection (CWE-150).

SI-2 Flaw Remediation good match
prevent

Mandates timely application of vendor patches that remediate the improper neutralization flaw in QuRouter.

SI-7 Software, Firmware, and Information Integrity partial match
detect

Requires integrity verification of software and data to identify unexpected behavior resulting from successful sequence injection.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly require input neutralization and escaping to prevent this class of flaw.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.29 Security testing in development and acceptance mostly match
detects

Security testing can detect the weakness but does not itself implement neutralization.

A.8.25 Secure development life cycle partial match
prevents

Secure development lifecycle mandates input validation and output encoding that directly neutralizes escape/meta sequences.

A.8.26 Application security requirements partial match
prevents

Application security requirements explicitly call for controls against injection and malformed input sequences.

A.8.27 Secure system architecture and engineering principles partial match
prevents

Secure architecture principles reduce attack surface but do not prescribe specific neutralization techniques.

A.8.28 Secure coding partial match
prevents

Secure coding standards require proper escaping and neutralization of control characters before downstream processing.

References