Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: decolua 9Router — GitHub Security Advisory (GHSA-vjc7-jrh9-9j86) Clear all filters
TI-2026-44500 CVE-2026-62328 · GHSA-xjwv-xjj9-gqqc

9Router 0.4.41 - Unauthenticated Information Disclosure via API Usage Endpoints

Priority HIGH 77

9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attackers to access sensitive user data by sending requests to unprotected API endpoints.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0046 Published 2026-07-13 No fix listed CWE-359
TI-2026-44499 CVE-2026-62327 · GHSA-7gvh-h32g-9cfw

9Router 0.4.41 - Unauthenticated API Key Exposure via /api/usage/stats

Priority HIGH 81

9Router through version 0.4.41 contains an unauthenticated information disclosure vulnerability that allows remote attackers to retrieve plaintext API keys for all connected AI provider accounts by sending a single unaut…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.06272 Published 2026-07-13 No fix listed CWE-306
TI-2026-42622 CVE-2026-59801 · GHSA-7f4f-856q-69wc

9Router 0.4.41 - Unauthenticated API Exposure via /api/providers

Priority HIGH 81

9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows remote attackers to interact with provider management API endpoints by sending requests without any credentials due to missing a…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02619 Published 2026-07-13 No fix listed CWE-306