CVE-2026-49352Published
9Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypass
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-49352 · Microsoft / collected KEV context
cve-program · CVE-2026-49352
- https://github.com/decolua/9router/security/advisories/GHSA-jphh-m39h-6gwx
- https://github.com/decolua/9router/commit/fe3ce25ae3cda48c0702c2d452e17f6ec214009d
- https://github.com/decolua/9router/releases/tag/v0.4.44
nvd · CVE-2026-49352
- https://github.com/decolua/9router/commit/fe3ce25ae3cda48c0702c2d452e17f6ec214009d
- https://github.com/decolua/9router/releases/tag/v0.4.44
- https://github.com/decolua/9router/security/advisories/GHSA-jphh-m39h-6gwx
osv · GHSA-jphh-m39h-6gwx
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.