CVE-2026-56681Published
9Router: Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-56681 · Microsoft / collected KEV context
cve-program · CVE-2026-56681
- https://github.com/decolua/9router/security/advisories/GHSA-5mj8-gf6m-fhw8
- https://github.com/decolua/9router/commit/efd20be8d81ef2e256a7037f3aa78e6b567b5fd3
- https://github.com/decolua/9router/releases/tag/v0.5.6
euvd · EUVD-2026-84541
- https://github.com/decolua/9router/security/advisories/GHSA-5mj8-gf6m-fhw8
- https://github.com/decolua/9router/commit/efd20be8d81ef2e256a7037f3aa78e6b567b5fd3
- https://github.com/decolua/9router/releases/tag/v0.5.6
nvd · CVE-2026-56681
- https://github.com/decolua/9router/commit/efd20be8d81ef2e256a7037f3aa78e6b567b5fd3
- https://github.com/decolua/9router/releases/tag/v0.5.6
- https://github.com/decolua/9router/security/advisories/GHSA-5mj8-gf6m-fhw8
osv · GHSA-5mj8-gf6m-fhw8
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.