decolua 9Router

• CVE-2026-108593 Medium 6.4 9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint 0.3%
• CVE-2026-103530 High 7.3 decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery 0.3%
• CVE-2026-56682 Medium 5.3 9Router: Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header 0.5%
• CVE-2026-56681 High 7.3 9Router: Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header 1.1%
• CVE-2026-72860 High 8.5 9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable 0.4%
• CVE-2026-56677 High 8.6 9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint 0.4%
• CVE-2026-63732 Critical 9.9 9router before 0.4.60 Remote Code Execution via default password 1.0%
• CVE-2026-63313 High 7.7 9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch 0.4%
• CVE-2026-62312 High 8.8 9Router: Authenticated RCE via Unvalidated MCP Plugin Arguments 0.9%
• CVE-2026-56678 Medium 6.4 9Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding 0.2%
• CVE-2026-56679 High 8.7 9Router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade 0.4%
• CVE-2026-49353 High 7.5 9Router: Local-Only Access Gate Bypass in 9router via Host Header SpoofING 0.3%
• CVE-2026-49352 Critical 9.8 9Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypass 0.6%
• CVE-2026-46339 Critical 10.0 9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes 2.8%
• CVE-2026-62328 High 7.5 9Router 0.4.41 - Unauthenticated Information Disclosure via API Usage Endpoints 0.5%
• CVE-2026-62327 Critical 9.1 9Router 0.4.41 - Unauthenticated API Key Exposure via /api/usage/stats 6.3%
• CVE-2026-59801 Critical 9.8 9Router 0.4.41 - Unauthenticated API Exposure via /api/providers 2.6%
• CVE-2026-56675 High 8.3 9router: Reverse proxy locality collapse allows unauthenticated access to 9router /v1 APIs 0.5%
• CVE-2026-55638 High 8.6 9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass 6.6%
• CVE-2026-55641 High 8.2 9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF 0.3%
• CVE-2026-56676 High 7.4 9router: Image prefetch DNS rebinding allows SSRF to internal services 0.2%
• CVE-2026-55500 Critical 9.9 9router: Exposure of Sensitive Information and Unprotected Database Import/Export Allows Complete Credential Theft and Database Takeover 0.5%
• CVE-2026-55501 High 7.3 9router: Login brute-force protection bypass via spoofed X-Forwarded-For header 0.4%
• CVE-2026-59800 Critical 9.8 9Router < 0.4.44 - OS Command Injection via sudoPassword Parameter in Tailscale Install Endpoint 2.1%
• CVE-2026-10269 Medium 6.3 decolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorization 0.3%
• CVE-2026-5842 High 7.3 decolua 9router Administrative API Endpoint api authorization 0.4%