CVE-2026-49353
9Router is an AI router & token saver. In 0.4.45 and earlier, 9Router's src/dashboardGuard.js local-only access gate used Host and Origin he
CVSS
7.5
High
EPSS
0.4%
p28
KEV
—
Exploit Today
8
0-100
Published: Jul 15, 2026 · Last modified: Jul 16, 2026 · CWE-290
0.4%EPSS · 30 days0.4%
2026-07-162026-07-21
9Router is an AI router & token saver. In 0.4.45 and earlier, 9Router's src/dashboardGuard.js local-only access gate used Host and Origin headers in isLocalRequest() to protect /api/mcp/*, /api/tunnel/*, and /api/cli-tools/*, allowing header spoofing in reverse proxy or tunnel deployments to reach MCP child process stdin paths.
- github.comhttps://github.com/decolua/9router/commit/5e1c1261368e06dced1cbc650684561b2c8844db
- github.comhttps://github.com/decolua/9router/commit/bb86808582067e4fc6f004508a919efb9970d1d5
- github.comhttps://github.com/decolua/9router/releases/tag/v0.4.46
- github.comhttps://github.com/decolua/9router/security/advisories/GHSA-6g2f-w7g3-77vf
- github.comhttps://github.com/decolua/9router/security/advisories/GHSA-6g2f-w7g3-77vf
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-31837.1 HIG38.4%
——12Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass.5hCVE-2026-158124.8 MED6.1%
——2A vulnerability was found in the internal Access Control List (ACL) subsystem of kronosnet (Version affected: <= 1.34). When the framework is explicitly configured to manage dynamic links (accepting network traffic from any IP address) without network payload encryption, the validation architecture implicitly trusts the link ID provided within incoming data packets. A remote, unauthenticated attacker can exploit this lack of validation by spoofing a legitimate link ID inside crafted network frames. This allows the attacker to fully bypass the ACL framework and inject arbitrary data packets into the application layer, potentially leading to data corruption or service instabilities.5hCVE-2026-160766.3 MED21.2%
——6A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function OpenApiRoute.chat_send of the file astrbot/dashboard/routes/open_api.py of the component API. Such manipulation of the argument Username leads to authentication bypass by spoofing. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.1dCVE-2026-622245.4 MED5.1%
——2OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can perform actions requiring stronger authorization by exploiting the mutable display name binding in the affected feature.4dCVE-2026-556529.8 CRI27.9%
——8Wekan is open source kanban built with Meteor. Prior to 9.46, header-login with HEADER_LOGIN_TRUSTED_IPS uses getRequestIp() in server/lib/headerLoginAuth.js to trust the client-supplied X-Forwarded-For header before the real socket address, allowing an unauthenticated attacker to send HEADER_LOGIN_ID for any username and receive a meteor_login_token session, including for admin. This issue is fixed in version 9.46.4dCVE-2026-123828.2 HIG29.0%
——9A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed Subject header matching a legitimate client certificate DN to bypass mTLS authentication and inject arbitrary events into protected EDA event streams.19h