Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

9router — Vulnerabilities & Security Advisories 26

All 26 CVE vulnerabilities found in 9router, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability records for the 9router product, focusing on common weakness classes such as buffer overflows, input validation errors, and privilege escalation flaws. The collection spans historical and recent advisories, covering a range of software defects that impact this networking equipment. Users can track the vendor's security updates, examine specific weakness patterns, and review the product's complete vulnerability history. The data enables security teams to identify recurring issues, assess risk exposure, and prioritize remediation efforts. By centralizing these records, the page supports systematic analysis of how different vulnerability types interact with the 9router's codebase and configuration surface. No marketing language is used; the content remains factual and technical, suitable for engineers and analysts who need reliable, structured information about this product's security posture over time.

Vendor: decolua

CVE ID Title CVSS Severity Published
CVE-2026-108593 9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint CWE-94 6.4 Medium 2026-10-10
CVE-2026-103530 decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery CWE-918 7.3 High 2026-09-30
CVE-2026-56682 9Router: Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header CWE-307 5.3 Medium 2026-09-22
CVE-2026-56681 9Router: Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header CWE-807 7.3 High 2026-09-22
CVE-2026-72860 9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable CWE-918 8.5 High 2026-08-20
CVE-2026-56677 9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint CWE-306 8.6 High 2026-08-17
CVE-2026-63313 9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch CWE-918 7.7 High 2026-07-23
CVE-2026-63732 9router before 0.4.60 Remote Code Execution via default password CWE-78 9.9 Critical 2026-07-23
CVE-2026-62312 9Router: Authenticated RCE via Unvalidated MCP Plugin Arguments CWE-78 8.8 High 2026-07-15
CVE-2026-56678 9Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding CWE-20 6.4 Medium 2026-07-15
CVE-2026-56679 9Router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade CWE-915 - - 2026-07-15
CVE-2026-49353 9Router: Local-Only Access Gate Bypass in 9router via Host Header SpoofING CWE-290 7.5 High 2026-07-15
CVE-2026-49352 9Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypass CWE-798 9.8 Critical 2026-07-15
CVE-2026-46339 9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes CWE-78 10.0 Critical 2026-07-15
CVE-2026-62328 9Router 0.4.41 - Unauthenticated Information Disclosure via API Usage Endpoints CWE-862 7.5 High 2026-07-13
CVE-2026-62327 9Router 0.4.41 - Unauthenticated API Key Exposure via /api/usage/stats CWE-306 9.1 Critical 2026-07-13
CVE-2026-59801 9Router 0.4.41 - Unauthenticated API Exposure via /api/providers CWE-306 9.8 Critical 2026-07-13
CVE-2026-56675 9router: Reverse proxy locality collapse allows unauthenticated access to 9router /v1 APIs CWE-287 8.3 High 2026-07-10
CVE-2026-55638 9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass CWE-862 8.6 High 2026-07-10
CVE-2026-55641 9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF CWE-290 8.2 High 2026-07-10
CVE-2026-56676 9router: Image prefetch DNS rebinding allows SSRF to internal services CWE-367 7.4 High 2026-07-10
CVE-2026-55500 9router: Exposure of Sensitive Information and Unprotected Database Import/Export Allows Complete Credential Theft and Database Takeover CWE-200 9.9 Critical 2026-07-10
CVE-2026-55501 9router: Login brute-force protection bypass via spoofed X-Forwarded-For header CWE-307 7.3 High 2026-07-10
CVE-2026-59800 9Router < 0.4.44 - OS Command Injection via sudoPassword Parameter in Tailscale Install Endpoint CWE-78 9.8 Critical 2026-07-07
CVE-2026-10269 decolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorization CWE-285 6.3 Medium 2026-06-01
CVE-2026-5842 decolua 9router Administrative API Endpoint api authorization CWE-639 7.3 High 2026-04-09

All 26 known CVE vulnerabilities affecting 9router with full Chinese analysis, references, and POCs where available.