Skip to content
Threat Feed
Subscribe

Product

9Router <= 0.4.41

1 brief RSS
critical advisory

Critical Unauthenticated API Vulnerabilities in 9Router Leading to Data Leak and RCE Risk

Multiple critical unauthenticated API vulnerabilities in 9Router versions up to 0.4.41 allow an attacker to perform full CRUD operations on provider connections, leak plaintext API keys, and access sensitive conversation history, posing risks of data exfiltration and denial of service.

9Router <= 0.4.41 web-vulnerability api-security data-exfiltration credential-access denial-of-service unauthenticated-access
3r 5t