CVE-2026-59801 | decolua 9Router up to 0.4.41 Management API /app/api/providers missing authentication

July 14, 2026 Yanac

A vulnerability labeled as very critical has been found in decolua 9Router up to 0.4.41. Affected by this issue is some unknown functionality of the file /app/api/providers of the component Management API. The manipulation results in missing authentication.

This vulnerability is reported as CVE-2026-59801. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More