CVE-2026-108593
9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allow
CVSS
6.4
Medio
EPSS
0.3%
p17
KEV
—
Exploit Today
5
0-100
Publicado: 10 oct 2026 · Última mod.: 10 oct 2026 · CWE-94
Sin historial EPSS suficiente todavía.
9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks_auto_accept and a hooks.post_llm_call shell command, which Hermes Agent executes without approval after an LLM call.
- github.comhttps://github.com/decolua/9router
- github.comhttps://github.com/decolua/9router/blob/a99cf57239ff778b61e434c2786009d5ed1c412c/src/app/api/cli-tools/hermes-settings/route.js#L185-L223
- github.comhttps://github.com/decolua/9router/blob/a99cf57239ff778b61e434c2786009d5ed1c412c/src/app/api/cli-tools/hermes-settings/route.js#L20-L35
- hackmd.iohttps://hackmd.io/@haind/9router-hermes-config-injection
- www.vulncheck.comhttps://www.vulncheck.com/advisories/9router-0.4.1-through-0.5.99-config-injection-rce-via-hermes-settings-endpoint
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1085663.5 BAJ26.4%
——8A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file templates/default/controllers/messages/index.tpl.php of the component Private Message Handler. Such manipulation of the argument nickname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 3a1ec8fcb073a46d06a2ab83bc2bf68225834281. It is best practice to apply a patch to resolve this issue.18hCVE-2026-620986.5 MED9.6%
——3Unauthenticated Content Injection in Boutique <= 2.3.3 versions.15hCVE-2026-4269610.0 CRÍ46.6%
——14Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.19 versions.15hCVE-2026-398028.1 ALT38.1%
——11Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.15hCVE-2026-1085989.8 CRÍ53.0%
——16Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtime or ProcessBuilder, executing OS commands in the Floci JVM.1dCVE-2026-1030717.5 ALT15.1%
——5Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3.15h