CVE-2026-59800Published
9Router < 0.4.44 - OS Command Injection via sudoPassword Parameter in Tailscale Install Endpoint
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-59800 · Microsoft / collected KEV context
cve-program · CVE-2026-59800
- https://github.com/decolua/9router/security/advisories/GHSA-g6g7-pvmx-m74p
- https://www.vulncheck.com/advisories/9router-os-command-injection-via-sudopassword-parameter-in-tailscale-install-endpoint
euvd · EUVD-2026-42073
- https://github.com/decolua/9router/security/advisories/GHSA-g6g7-pvmx-m74p
- https://www.vulncheck.com/advisories/9router-os-command-injection-via-sudopassword-parameter-in-tailscale-install-endpoint
nvd · CVE-2026-59800
- https://github.com/decolua/9router/security/advisories/GHSA-g6g7-pvmx-m74p
- https://www.vulncheck.com/advisories/9router-os-command-injection-via-sudopassword-parameter-in-tailscale-install-endpoint
osv · GHSA-g6g7-pvmx-m74p
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.