Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:36:02 +0000 CVE-2026-55500 — 9router: Exposure of Sensitive Information and Unprotected Database Import/Export Allows Complete Credential Theft and… https://cve.radiocsirt.org/vuln/cve-2026-55500 <p><strong>Affected:</strong> decolua 9router</p> <p>9Router is an AI router &amp; token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) and full database import (complete overwrite) without any authentication requirement beyond the ALWAYS_PROTECTED middleware check, which only validates JWT or CLI token. This issue is fixed in version 0.4.80.</p> <p><strong>Affected:</strong> decolua 9router</p> <p>9Router is an AI router &amp; token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) and full database import (complete overwrite) without any authentication requirement beyond the ALWAYS_PROTECTED middleware check, which only validates JWT or CLI token. This issue is fixed in version 0.4.80.</p> https://cve.radiocsirt.org/vuln/cve-2026-55500