{"id":"EUVD-2026-42928","enisaUuid":"075dd036-b29e-3aa9-b4ec-691b9a7169f6","description":"9Router is an AI router \u0026 token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) and full database import (complete overwrite) without any authentication requirement beyond the ALWAYS_PROTECTED middleware check, which only validates JWT or CLI token. This issue is fixed in version 0.4.80.","datePublished":"Jul 10, 2026, 3:28:27 PM","dateUpdated":"Jul 10, 2026, 3:41:31 PM","baseScore":9.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/decolua/9router/security/advisories/GHSA-qvfm-67h2-2qfx\nhttps://github.com/decolua/9router/commit/0c7c9de00ae3ab81d6580e3cc368483c4c03f6fd\nhttps://github.com/decolua/9router/releases/tag/v0.4.80\n","aliases":"CVE-2026-55500\nGHSA-qvfm-67h2-2qfx\n","assigner":"GitHub_M","epss":0.48,"enisaIdProduct":[{"id":"88b55c07-9832-3517-94cc-0a142e5dec93","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"\u003c 0.4.80"}],"enisaIdVendor":[{"id":"a5338a51-57c2-384a-a5e7-405e0b23c865","vendor":{"name":"decolua"}}],"enisaIdVulnerability":[{"id":"d9e43ce8-fd82-3d35-8e6f-f8b7676aee18","vulnerability":{"id":"CVE-2026-55500","description":"9Router is an AI router \u0026 token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) and full database import (complete overwrite) without any authentication requirement beyond the ALWAYS_PROTECTED middleware check, which only validates JWT or CLI token. This issue is fixed in version 0.4.80.","datePublished":"Jul 10, 2026, 3:28:27 PM","dateUpdated":"Jul 10, 2026, 3:41:31 PM","status":"PUBLISHED","baseScore":9.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/decolua/9router/security/advisories/GHSA-qvfm-67h2-2qfx\nhttps://github.com/decolua/9router/commit/0c7c9de00ae3ab81d6580e3cc368483c4c03f6fd\nhttps://github.com/decolua/9router/releases/tag/v0.4.80\n","enisa_id":"EUVD-2026-42928\n","assigner":"GitHub_M","epss":0.48,"dataProcessed":"Oct 30, 2026, 7:16:28 AM","vulnerabilityProduct":[{"id":"01c97c75-6069-30d5-b862-4d5d6a6bd3f0","product":{"name":"9router","vendor":{"name":"decolua"}},"product_version":"\u003c 0.4.80"}],"vulnerabilityVendor":[{"id":"797290ef-748c-3594-936c-efa7da02b636","vendor":{"name":"decolua"}}]}},{"id":"fd3e7bcc-63f1-3490-8498-a4c3dc89eda1","vulnerability":{"id":"GHSA-qvfm-67h2-2qfx","description":"9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover","datePublished":"Jul 6, 2026, 9:37:49 PM","dateUpdated":"Jul 6, 2026, 9:37:49 PM","baseScore":0.0,"references":"https://github.com/decolua/9router/security/advisories/GHSA-qvfm-67h2-2qfx\nhttps://github.com/decolua/9router\n","enisa_id":"EUVD-2026-42928\n","aliases":"CVE-2026-55500\nGHSA-qvfm-67h2-2qfx\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}