9Router 0.4.41 - Unauthenticated API Exposure via /api/providers

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-59801 · Microsoft / collected KEV context

CVE-2026-62327 · Microsoft / collected KEV context

CVE-2026-62328 · Microsoft / collected KEV context

GHSA-vjc7-jrh9-9j86

cve-program · CVE-2026-59801

• https://github.com/decolua/9router/security/advisories/GHSA-vjc7-jrh9-9j86
• https://www.vulncheck.com/advisories/9router-unauthenticated-api-exposure-via-api-providers

cve-program · CVE-2026-62327

• https://github.com/decolua/9router/security/advisories/GHSA-vjc7-jrh9-9j86
• https://www.vulncheck.com/advisories/9router-unauthenticated-api-key-exposure-via-api-usage-stats

cve-program · CVE-2026-62328

• https://github.com/decolua/9router/security/advisories/GHSA-vjc7-jrh9-9j86
• https://www.vulncheck.com/advisories/9router-unauthenticated-information-disclosure-via-api-usage-endpoints

nvd · CVE-2026-59801

• https://github.com/decolua/9router/security/advisories/GHSA-vjc7-jrh9-9j86
• https://www.vulncheck.com/advisories/9router-unauthenticated-api-exposure-via-api-providers

nvd · CVE-2026-62327

• https://github.com/decolua/9router/security/advisories/GHSA-vjc7-jrh9-9j86
• https://www.vulncheck.com/advisories/9router-unauthenticated-api-key-exposure-via-api-usage-stats

nvd · CVE-2026-62328

• https://github.com/decolua/9router/security/advisories/GHSA-vjc7-jrh9-9j86
• https://www.vulncheck.com/advisories/9router-unauthenticated-information-disclosure-via-api-usage-endpoints

osv · GHSA-vjc7-jrh9-9j86

• https://github.com/decolua/9router/security/advisories/GHSA-vjc7-jrh9-9j86
• https://github.com/decolua/9router

No related operational record is retained in the current change model.