Skip to content
Threat Feed
Subscribe

Vendor

9routers

1 brief RSS
critical advisory

9routers Database Exposure and Takeover via Insecure API

A critical vulnerability (CVE-2026-55500) in 9routers versions <= 0.4.71 allows authenticated attackers with a valid JWT token to export the complete database containing plaintext credentials and secrets, and to import a modified database, leading to full system takeover and credential theft.

9router <= 0.4.71 web-exploitation data-exfiltration credential-access persistence impact
1r 6t 1i