GHSA-xrrh-p7f2-27vm
High · 7.3CVSS
7.3
EPSS
—
Published
Apr 9, 2026
CISA due date
—
The record
decolua 9router vulnerable to authorization bypass
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | 9router | 0 | 0.3.75 |
Related vulnerabilities
- CVE-2026-5842 A security vulnerability has been detected in decolua 9router up to 0.3.47. Same vulnerability
- GHSA-fhh6-4qxv-rpqj 9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes Also affects 9router
- CVE-2026-46339 9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes Also affects 9router
- CVE-2026-85543 Some Wi-Fi series camera products have insufficient permission validation on certain… CWE-285
- CVE-2026-21097 Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1… CWE-285
- CVE-2026-86804 A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. CWE-285
- CVE-2026-86277 A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management &… CWE-285
- CVE-2026-86283 MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp)… CWE-285