{"id":"EUVD-2026-20853","enisaUuid":"ea7c8af9-5a39-3249-bd9a-7707e50cb344","description":"A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted element is an unknown function of the file /api of the component Administrative API Endpoint. The manipulation leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.3.75 is sufficient to resolve this issue. It is suggested to upgrade the affected component.","datePublished":"Apr 9, 2026, 4:30:17 AM","dateUpdated":"Apr 13, 2026, 7:59:23 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","references":"https://vuldb.com/vuln/356298\nhttps://vuldb.com/vuln/356298/cti\nhttps://vuldb.com/submit/790003\nhttps://github.com/decolua/9router/issues/431\nhttps://github.com/decolua/9router/issues/431#issuecomment-4140163867\nhttps://github.com/deepcat1337/Free_Api_Exploit/tree/main\nhttps://github.com/decolua/9router/releases/tag/v0.3.75\nhttps://github.com/decolua/9router/\n","aliases":"CVE-2026-5842\n","assigner":"VulDB","epss":0.39,"enisaIdProduct":[{"id":"09026d95-6747-3a3c-8d7f-156864db854d","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.28"},{"id":"09fadd74-8e2c-3306-9369-7b0023770153","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.12"},{"id":"15ed0d64-689d-36c9-952a-a80935af6349","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.34"},{"id":"1a3e4e49-0141-3b67-ae43-64ea6dfa9f5e","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.6"},{"id":"1e38c889-3d87-3636-92b0-2c92270d99ec","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.31"},{"id":"1fb86852-f4a6-37fd-944a-fbba2a6477ba","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.19"},{"id":"1fdcf261-5a01-3fd1-b1be-3434dee0380a","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.10"},{"id":"2a613ccb-727e-3e90-ada4-0c337b944c06","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.36"},{"id":"2c4f3454-abc0-3d64-a11c-de8729d736a9","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.2"},{"id":"308ab8a3-e407-3cd0-8ed5-fc6ee18bb861","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.45"},{"id":"32afaa78-501f-3ccd-9323-6d86e9cb239f","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.46"},{"id":"45e0788a-f97f-3348-b893-36928bf97e2e","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.13"},{"id":"49e1826b-3aed-3aab-9720-b78c07b76364","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.0"},{"id":"4f9c9842-694a-3459-a37f-c3acb5a0de34","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.9"},{"id":"4fb770c5-d95e-3d0a-91bb-1c9144f812a0","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.43"},{"id":"582c03a9-7f5c-3033-9baa-48a3909a39e1","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.30"},{"id":"595fcf58-bb41-3fa9-9adb-9811f6a7e19c","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.41"},{"id":"5e36836c-05f2-3e3a-b366-e6f9c0a925b1","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.47"},{"id":"5e66a2e3-3ed8-391f-8be3-d41dc21b4cb8","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.20"},{"id":"6eba929a-27c8-3730-9bbd-386e303a2ac4","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.26"},{"id":"712abe38-d9ff-3dbd-8988-1f1d1b673da2","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.7"},{"id":"7a88a1bd-79ea-3340-8157-cbb855df0d6d","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.35"},{"id":"8e14d4fc-41bc-3621-b8e6-d63755a999c0","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.11"},{"id":"9f87cd7e-6545-3afd-8a75-56e8fdb110d8","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.38"},{"id":"a3543023-f07e-3894-804f-2081017894a3","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.21"},{"id":"a3f0f813-7ef6-3ab2-b5cf-aa7a29af64e2","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.3"},{"id":"aa607c59-3606-3db1-aab5-f6a7d0316965","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.18"},{"id":"b2548643-5aa7-333c-a5cf-7ffd6bd0e203","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.14"},{"id":"b6c8af3a-dd58-31bd-a8c0-4566ae99cca0","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.16"},{"id":"bd86665d-c1f6-3857-b8d4-a0a76c1d5264","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.25"},{"id":"c31a44e8-49e2-3df5-8525-eea2e6101658","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.44"},{"id":"c449d00f-cf6a-3c51-8389-0b9f83a4f446","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.27"},{"id":"c6097022-b3b6-3e98-96d8-06289fc6577c","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.23"},{"id":"cd430b4b-6673-3f72-94a3-2a024ab6be3f","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.29"},{"id":"d1c30bc6-5172-3513-9d57-87f73dfffea1","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.42"},{"id":"dbdeeff8-03f8-3813-8c50-937f0394bdcb","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.17"},{"id":"de6ee7dc-926b-32c6-b6eb-fb2e2acdc9e4","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.32"},{"id":"df09767c-8261-3fd2-b127-9e4eee4c5667","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.1"},{"id":"dfe15840-a1e4-3afc-afd4-f0cd7fc535e0","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.33"},{"id":"e086f7ed-90f9-3e0b-bd4a-2d868d348cb6","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.15"},{"id":"e75225f9-0680-3218-a000-807c3bd7bd2f","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.37"},{"id":"eb550239-91fa-3555-adac-3dd336b6548e","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.39"},{"id":"ee8594c7-5f2e-3f29-b0a0-a83dc3c57bee","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.40"},{"id":"f441d9b4-abc7-3e85-96d9-fd3ec7fb9135","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.4"},{"id":"f7482507-187e-3fed-a1a8-5321c5f9cab9","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.24"},{"id":"fbe73e3a-cb18-3386-8f43-38879e106943","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.5"},{"id":"fd88ea9b-886c-3bd9-8402-b499ead6b397","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.22"},{"id":"fe8e257f-777b-3976-9360-82b3b637a156","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.8"}],"enisaIdVendor":[{"id":"d7ad7b53-366f-3714-9fd8-c43c3299a64b","vendor":{"name":"decolua"}}],"enisaIdVulnerability":[{"id":"b2806bf9-7d74-3846-90e1-a1d5465690e3","vulnerability":{"id":"CVE-2026-5842","description":"A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted element is an unknown function of the file /api of the component Administrative API Endpoint. The manipulation leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.3.75 is sufficient to resolve this issue. It is suggested to upgrade the affected component.","datePublished":"Apr 9, 2026, 4:30:17 AM","dateUpdated":"Apr 13, 2026, 7:59:23 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","references":"https://vuldb.com/vuln/356298\nhttps://vuldb.com/vuln/356298/cti\nhttps://vuldb.com/submit/790003\nhttps://github.com/decolua/9router/issues/431\nhttps://github.com/decolua/9router/issues/431#issuecomment-4140163867\nhttps://github.com/deepcat1337/Free_Api_Exploit/tree/main\nhttps://github.com/decolua/9router/releases/tag/v0.3.75\nhttps://github.com/decolua/9router/\n","enisa_id":"EUVD-2026-20853\n","assigner":"VulDB","epss":0.39,"dataProcessed":"Oct 28, 2026, 7:17:03 AM","vulnerabilityProduct":[{"id":"0cee56cc-5cef-31ad-9c94-472cbd828cbf","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.39"},{"id":"12cc8b67-9175-34f3-ad81-40ad0f12ab26","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.28"},{"id":"181e27ed-f419-3308-8b3a-3f33843219fe","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.24"},{"id":"24bbf84d-665d-33ad-9309-4c0637e16c82","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.29"},{"id":"28a43b41-4c36-3f87-87b1-04ab2061bf9a","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.4"},{"id":"2f875e5d-4c75-3b99-8cf7-e4668eae5a8e","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.6"},{"id":"3787532e-41c3-3313-bb70-5c4cba420648","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.42"},{"id":"48259dbe-4983-3161-bd02-caf64e1be5f7","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.47"},{"id":"486f7950-45b4-3eef-83bb-c582022ed4dc","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.19"},{"id":"4c986929-1447-3b80-83cd-7dded76f1403","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.45"},{"id":"53c82dc6-d754-3a7a-aef3-e752ade1a32c","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.25"},{"id":"5b025afa-800d-3a91-bbdc-e0d8aa003465","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.16"},{"id":"6226b5a4-c4e1-3126-a69c-9d400a90608e","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.3"},{"id":"67580962-1578-3c50-b047-00d5a69fd0b0","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.0"},{"id":"681f2a3f-88e1-3def-873f-2a8cc76bca29","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.37"},{"id":"702c8c1d-42a2-3e17-a709-2c5428cb0fb8","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.15"},{"id":"7c62f431-a77e-3d63-a816-82329e0c4fe7","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.17"},{"id":"817f16a8-11db-370e-bd11-cfc0e22543d7","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.34"},{"id":"82ac581f-6f52-31c9-888c-bc24ed2029cf","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.38"},{"id":"8a65fd25-e890-387d-afc9-729e4aaff403","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.5"},{"id":"8c4a0efa-a3bd-3566-8805-e5054676b1ce","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.13"},{"id":"96b18539-ddcd-3196-b582-e0e0bf04220d","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.31"},{"id":"9b9e5084-734e-377a-a43a-4bf53f9f7fab","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.36"},{"id":"9f334a9a-0abc-3448-930a-a2c5721010e1","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.1"},{"id":"a7a27461-5833-3cfb-bda3-c0944ae62ee0","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.22"},{"id":"aa45a745-c8da-3763-b223-4091a2fe9357","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.32"},{"id":"ac1a293f-4e19-31c2-be29-8cec02989ee8","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.27"},{"id":"add9179e-56df-3d5e-b372-3e5747a166c0","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.46"},{"id":"af4d283a-2e27-35a6-a0c6-e951c004434c","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.21"},{"id":"b0088c36-e3ab-32ee-b903-76a46cacacbb","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.41"},{"id":"b3464bc5-cf4a-33bb-bbfc-f25f4b3e8d37","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.20"},{"id":"b39a2858-0b84-3cfc-9752-c2322128881e","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.11"},{"id":"b60f1ef8-1e76-3b21-94f9-9d817a434162","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.40"},{"id":"b6be29c6-37a3-377c-891d-9c3194c4b5b1","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.44"},{"id":"bf8376b3-b68f-35f9-9261-9edfc03f0d54","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.30"},{"id":"c974022a-6875-3940-a560-0cd1b235e490","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.10"},{"id":"d2acb86e-ec74-3962-b199-8eaf7296740f","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.26"},{"id":"d4ac00ab-1263-3930-b110-379955efe5e7","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.12"},{"id":"dd8aaee4-1259-31e6-9f24-7ff8c1951dc9","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.43"},{"id":"df9bb5c6-dc02-35c7-a410-a59060655df9","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.9"},{"id":"e5eca8a6-3f78-36cf-ba4c-55c151ab80fc","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.8"},{"id":"ea34edc9-3dc9-32a2-a0a3-04a361fd6e3d","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.18"},{"id":"ea6ec9d8-1116-3640-8079-9fcba329e1c8","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.7"},{"id":"eb316739-1143-3a24-9ec1-dbacc0c9f34d","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.33"},{"id":"efc4e98d-61bd-3995-bb31-7a9c942fcebf","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.14"},{"id":"f13c293f-dad6-3e35-958e-4104d1726c90","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.35"},{"id":"f1846dfb-d0ec-36a7-b08e-a9190d420eb3","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.23"},{"id":"fa0a17e0-0274-3815-9874-a0618c01aab2","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"0.3.2"}],"vulnerabilityVendor":[{"id":"b510fd96-7838-3d5e-9a9c-e82b3aecaa53","vendor":{"name":"decolua"}}]}}],"enisaIdAdvisory":[]}