{"id":"EUVD-2026-42928","revision":"394e62e71adf4924b8f2ade3beac6e60","records":[{"revision":"394e62e71adf4924b8f2ade3beac6e60","observedAt":"2026-11-03T11:05:13.122+00:00","statement":{"source":"euvd","id":"EUVD-2026-42928","aliases":["CVE-2026-55500","GHSA-qvfm-67h2-2qfx"],"title":"9Router is an AI router & token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) and full database import (complete overwrite) without…","description":"9Router is an AI router & token saver. Prior to 0.4.80, the /api/settings/database endpoint allows full database export (containing all credentials, API keys, OAuth tokens, and settings) and full database import (complete overwrite) without any authentication requirement beyond the ALWAYS_PROTECTED middleware check, which only validates JWT or CLI token. This issue is fixed in version 0.4.80.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","score":9.9,"severity":null}],"references":["https://github.com/decolua/9router/security/advisories/GHSA-qvfm-67h2-2qfx","https://github.com/decolua/9router/commit/0c7c9de00ae3ab81d6580e3cc368483c4c03f6fd","https://github.com/decolua/9router/releases/tag/v0.4.80"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42928","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jul 10, 2026, 3:28:27 PM","dateUpdated":"Jul 10, 2026, 3:41:31 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-42928","identifiers":["EUVD-2026-42928","CVE-2026-55500","GHSA-qvfm-67h2-2qfx"]},"retained":false,"historicalAffected":[]}],"coverage":[]}