https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 03 Sep 2026 15:15:36 +0000 https://vulnerability.circl.lu/sighting/f851230e-77f6-4b0d-9c11-0b7f785062c4/export {"uuid": "f851230e-77f6-4b0d-9c11-0b7f785062c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5667", "type": "seen", "source": "https://t.me/CyberDispatch/2026", "content": "CVE-2026-5667: Unauthenticated Remote Control of Mitsubishi MAC-577IF-2E WiFi Adapters via Probe Request Reconnaissance.", "creation_timestamp": "2026-08-31T00:00:39.574677Z"} {"uuid": "f851230e-77f6-4b0d-9c11-0b7f785062c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5667", "type": "seen", "source": "https://t.me/CyberDispatch/2026", "content": "CVE-2026-5667: Unauthenticated Remote Control of Mitsubishi MAC-577IF-2E WiFi Adapters via Probe Request Reconnaissance.", "creation_timestamp": "2026-08-31T00:00:39.574677Z"} https://vulnerability.circl.lu/sighting/f851230e-77f6-4b0d-9c11-0b7f785062c4/export Mon, 31 Aug 2026 00:00:39 +0000 https://vulnerability.circl.lu/sighting/52f9fba0-7803-4aac-a376-a87fac405cfd/export {"uuid": "52f9fba0-7803-4aac-a376-a87fac405cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5667", "type": "seen", "source": "https://t.me/CyberDispatch/2026", "content": "CVE-2026-5667: Unauthenticated Remote Control of Mitsubishi MAC-577IF-2E WiFi Adapters via Probe Request Reconnaissance.", "creation_timestamp": "2026-08-30T00:00:39.523607Z"} {"uuid": "52f9fba0-7803-4aac-a376-a87fac405cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5667", "type": "seen", "source": "https://t.me/CyberDispatch/2026", "content": "CVE-2026-5667: Unauthenticated Remote Control of Mitsubishi MAC-577IF-2E WiFi Adapters via Probe Request Reconnaissance.", "creation_timestamp": "2026-08-30T00:00:39.523607Z"} https://vulnerability.circl.lu/sighting/52f9fba0-7803-4aac-a376-a87fac405cfd/export Sun, 30 Aug 2026 00:00:39 +0000 https://vulnerability.circl.lu/sighting/2255eb9d-09e0-44d4-9842-6a72ef4f705d/export {"uuid": "2255eb9d-09e0-44d4-9842-6a72ef4f705d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5667", "type": "seen", "source": "https://t.me/CyberDispatch/2026", "content": "CVE-2026-5667: Unauthenticated Remote Control of Mitsubishi MAC-577IF-2E WiFi Adapters via Probe Request Reconnaissance.", "creation_timestamp": "2026-08-29T20:00:09.450271Z"} {"uuid": "2255eb9d-09e0-44d4-9842-6a72ef4f705d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5667", "type": "seen", "source": "https://t.me/CyberDispatch/2026", "content": "CVE-2026-5667: Unauthenticated Remote Control of Mitsubishi MAC-577IF-2E WiFi Adapters via Probe Request Reconnaissance.", "creation_timestamp": "2026-08-29T20:00:09.450271Z"} https://vulnerability.circl.lu/sighting/2255eb9d-09e0-44d4-9842-6a72ef4f705d/export Sat, 29 Aug 2026 20:00:09 +0000 https://vulnerability.circl.lu/sighting/36cf1578-d1ff-4cb3-a02f-bcc71d331c2a/export {"uuid": "36cf1578-d1ff-4cb3-a02f-bcc71d331c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56677", "type": "seen", "source": "https://gist.github.com/alon710/2e62558f8ce5c6b39d8a9a9db22fa826", "content": "# CVE-2026-56677: CVE-2026-56677: Unauthenticated Server-Side Request Forgery in 9Router OIDC Test Endpoint\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-56677\n\n## Summary\nA high-severity security vulnerability exists in 9Router, an AI router and token saver dashboard. When dashboard authentication features are disabled or left in default configurations, the application exposes administrative testing routines directly to the public internet. Unauthenticated network adversaries can exploit the OIDC configuration validation endpoint to initiate arbitrary HTTP requests, routing unauthorized traffic to local loops, adjacent container ports, and cloud resource metadata interfaces.\n\n## TL;DR\nUnauthenticated network attackers can exploit a testing endpoint in 9Router (<= 0.5.4) to execute Server-Side Request Forgery (SSRF), gaining unauthorized access to internal services and cloud instance metadata.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918, CWE-306\n- **Attack Vector**: Network (AV:N)\n- **CVSS**: 8.6 (High)\n- **EPSS Score**: N/A\n- **Impact**: High Integrity, Low Confidentiality, Low Availability\n- **Exploit Status**: Proof of Concept (PoC) available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- 9Router AI dashboard platforms running version 0.5.4 or earlier\n- **9router**: <= 0.5.4 (Fixed in: `Verify config changes (Require API key ON)`)\n\n## Mitigation\n\n- Ensure that 'Require API key' is toggled to ON in the dashboard settings\n- Implement DNS lookup validation before issuing outbound network connections to user-controlled URLs\n- Restrict container egress traffic to block outbound calls to localhost, RFC 1918 subnets, and cloud metadata blocks\n\n**Remediation Steps:**\n1. Log in to the 9Router administrative dashboard\n2. Go to the Endpoint & Key configurations panel\n3. Enable the 'Require API key' option to block unauthenticated access\n4. Deploy egress network security rules in your firewall or VPC to isolate outbound calls\n\n## References\n\n- [GitHub Security Advisory GHSA-8g4w-4ffg-8vgx](https://github.com/decolua/9router/security/advisories/GHSA-8g4w-4ffg-8vgx)\n- [CVE-2026-56677 Record](https://www.cve.org/CVERecord?id=CVE-2026-56677)\n- [9Router GitHub Page Repository](https://github.com/decolua/9router)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-56677) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T01:32:24.606380Z"} {"uuid": "36cf1578-d1ff-4cb3-a02f-bcc71d331c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56677", "type": "seen", "source": "https://gist.github.com/alon710/2e62558f8ce5c6b39d8a9a9db22fa826", "content": "# CVE-2026-56677: CVE-2026-56677: Unauthenticated Server-Side Request Forgery in 9Router OIDC Test Endpoint\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-56677\n\n## Summary\nA high-severity security vulnerability exists in 9Router, an AI router and token saver dashboard. When dashboard authentication features are disabled or left in default configurations, the application exposes administrative testing routines directly to the public internet. Unauthenticated network adversaries can exploit the OIDC configuration validation endpoint to initiate arbitrary HTTP requests, routing unauthorized traffic to local loops, adjacent container ports, and cloud resource metadata interfaces.\n\n## TL;DR\nUnauthenticated network attackers can exploit a testing endpoint in 9Router (<= 0.5.4) to execute Server-Side Request Forgery (SSRF), gaining unauthorized access to internal services and cloud instance metadata.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918, CWE-306\n- **Attack Vector**: Network (AV:N)\n- **CVSS**: 8.6 (High)\n- **EPSS Score**: N/A\n- **Impact**: High Integrity, Low Confidentiality, Low Availability\n- **Exploit Status**: Proof of Concept (PoC) available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- 9Router AI dashboard platforms running version 0.5.4 or earlier\n- **9router**: <= 0.5.4 (Fixed in: `Verify config changes (Require API key ON)`)\n\n## Mitigation\n\n- Ensure that 'Require API key' is toggled to ON in the dashboard settings\n- Implement DNS lookup validation before issuing outbound network connections to user-controlled URLs\n- Restrict container egress traffic to block outbound calls to localhost, RFC 1918 subnets, and cloud metadata blocks\n\n**Remediation Steps:**\n1. Log in to the 9Router administrative dashboard\n2. Go to the Endpoint & Key configurations panel\n3. Enable the 'Require API key' option to block unauthenticated access\n4. Deploy egress network security rules in your firewall or VPC to isolate outbound calls\n\n## References\n\n- [GitHub Security Advisory GHSA-8g4w-4ffg-8vgx](https://github.com/decolua/9router/security/advisories/GHSA-8g4w-4ffg-8vgx)\n- [CVE-2026-56677 Record](https://www.cve.org/CVERecord?id=CVE-2026-56677)\n- [9Router GitHub Page Repository](https://github.com/decolua/9router)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-56677) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T01:32:24.606380Z"} https://vulnerability.circl.lu/sighting/36cf1578-d1ff-4cb3-a02f-bcc71d331c2a/export Tue, 18 Aug 2026 01:32:24 +0000 https://vulnerability.circl.lu/sighting/70fe7ff5-025a-4192-b8e5-b19efae686ff/export {"uuid": "70fe7ff5-025a-4192-b8e5-b19efae686ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56677", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcso2hlat27", "content": "\ud83d\udfe0 CVE-2026-56677 - High (8.6)\n\n9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56677/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-17T23:01:55.891077Z"} {"uuid": "70fe7ff5-025a-4192-b8e5-b19efae686ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56677", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcso2hlat27", "content": "\ud83d\udfe0 CVE-2026-56677 - High (8.6)\n\n9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56677/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-17T23:01:55.891077Z"} https://vulnerability.circl.lu/sighting/70fe7ff5-025a-4192-b8e5-b19efae686ff/export Mon, 17 Aug 2026 23:01:55 +0000 https://vulnerability.circl.lu/sighting/5ed60cdb-a8a1-4303-bb95-d77417ab257e/export {"uuid": "5ed60cdb-a8a1-4303-bb95-d77417ab257e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56677", "type": "published-proof-of-concept", "source": "https://github.com/decolua/9router/security/advisories/GHSA-8g4w-4ffg-8vgx", "content": "", "creation_timestamp": "2026-08-17T22:35:10.311901Z"} {"uuid": "5ed60cdb-a8a1-4303-bb95-d77417ab257e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56677", "type": "published-proof-of-concept", "source": "https://github.com/decolua/9router/security/advisories/GHSA-8g4w-4ffg-8vgx", "content": "", "creation_timestamp": "2026-08-17T22:35:10.311901Z"} https://vulnerability.circl.lu/sighting/5ed60cdb-a8a1-4303-bb95-d77417ab257e/export Mon, 17 Aug 2026 22:35:10 +0000 https://vulnerability.circl.lu/sighting/05e41ac1-d536-409c-be3e-51def4bbbec9/export {"uuid": "05e41ac1-d536-409c-be3e-51def4bbbec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5667", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3msy2swpzmi2g", "content": "CVE-2026-5667: Unauthenticated Remote Control of Mitsubishi MAC-577IF-2E WiFi Adapters via Probe Request Reconnaissance", "creation_timestamp": "2026-08-13T16:28:31.938441Z"} {"uuid": "05e41ac1-d536-409c-be3e-51def4bbbec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5667", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3msy2swpzmi2g", "content": "CVE-2026-5667: Unauthenticated Remote Control of Mitsubishi MAC-577IF-2E WiFi Adapters via Probe Request Reconnaissance", "creation_timestamp": "2026-08-13T16:28:31.938441Z"} https://vulnerability.circl.lu/sighting/05e41ac1-d536-409c-be3e-51def4bbbec9/export Thu, 13 Aug 2026 16:28:31 +0000 https://vulnerability.circl.lu/sighting/1e598962-84d3-4f92-98ba-b60414ce7477/export {"uuid": "1e598962-84d3-4f92-98ba-b60414ce7477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56673", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4o6frjq32t", "content": "\ud83d\udfe0 CVE-2026-56673 - High (7.5)\n\nComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56673/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-02T19:00:25.750814Z"} {"uuid": "1e598962-84d3-4f92-98ba-b60414ce7477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56673", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4o6frjq32t", "content": "\ud83d\udfe0 CVE-2026-56673 - High (7.5)\n\nComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56673/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-02T19:00:25.750814Z"} https://vulnerability.circl.lu/sighting/1e598962-84d3-4f92-98ba-b60414ce7477/export Sun, 02 Aug 2026 19:00:25 +0000 https://vulnerability.circl.lu/sighting/bbd41c4f-aed2-4d95-8ed8-c2527d9624f6/export {"uuid": "bbd41c4f-aed2-4d95-8ed8-c2527d9624f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56672", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4o675pfx2b", "content": "\ud83d\udfe0 CVE-2026-56672 - High (8.2)\n\nComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{fi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56672/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-02T19:00:19.270250Z"} {"uuid": "bbd41c4f-aed2-4d95-8ed8-c2527d9624f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56672", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms4o675pfx2b", "content": "\ud83d\udfe0 CVE-2026-56672 - High (8.2)\n\nComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{fi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56672/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-02T19:00:19.270250Z"} https://vulnerability.circl.lu/sighting/bbd41c4f-aed2-4d95-8ed8-c2527d9624f6/export Sun, 02 Aug 2026 19:00:19 +0000 https://vulnerability.circl.lu/sighting/7c4a5367-1351-4e7f-a6a5-f5da9c8bc937/export {"uuid": "7c4a5367-1351-4e7f-a6a5-f5da9c8bc937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56679", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpwtkfilw2a", "content": "CVE-2026-56679 - 9Router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade\nCVE ID : CVE-2026-56679\n \n Published : July 15, 2026, 9:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : 9Router is an AI router & token saver. Prior to 0.5.4, th...", "creation_timestamp": "2026-07-16T00:05:36.437487Z"} {"uuid": "7c4a5367-1351-4e7f-a6a5-f5da9c8bc937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56679", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpwtkfilw2a", "content": "CVE-2026-56679 - 9Router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade\nCVE ID : CVE-2026-56679\n \n Published : July 15, 2026, 9:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : 9Router is an AI router & token saver. Prior to 0.5.4, th...", "creation_timestamp": "2026-07-16T00:05:36.437487Z"} https://vulnerability.circl.lu/sighting/7c4a5367-1351-4e7f-a6a5-f5da9c8bc937/export Thu, 16 Jul 2026 00:05:36 +0000