CVE-2026-56678 | decolua 9router up to 0.5.5 Kiro API-key Validation Endpoint /api/oauth/kiro/api-key region input validation

July 15, 2026 Yanac

A vulnerability has been found in decolua 9router up to 0.5.5 and classified as problematic. Impacted is an unknown function of the file /api/oauth/kiro/api-key of the component Kiro API-key Validation Endpoint. This manipulation of the argument region causes improper input validation.

This vulnerability is tracked as CVE-2026-56678. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More