<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: decolua-9router</title><description>Every new CVE for decolua-9router.</description><link>https://agentprime.io/</link><item><title>CVE-2026-108593: 9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-108593/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108593/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 10 Oct 2026 18:16:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103530: decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-103530/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103530/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Sep 2026 23:45:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-72860: 9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable</title><link>https://agentprime.io/advisories/CVE-2026-72860/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-72860/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 21:35:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63732: 9router before 0.4.60 Remote Code Execution via default password</title><link>https://agentprime.io/advisories/CVE-2026-63732/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63732/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 21:16:46 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-63313: 9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch</title><link>https://agentprime.io/advisories/CVE-2026-63313/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63313/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 21:16:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-62312: 9Router: Authenticated RCE via Unvalidated MCP Plugin Arguments</title><link>https://agentprime.io/advisories/CVE-2026-62312/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-62312/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Jul 2026 20:53:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-10269: decolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorization</title><link>https://agentprime.io/advisories/CVE-2026-10269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-10269/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Jun 2026 15:15:09 GMT</pubDate><category>CVE</category></item></channel></rss>