CVE-2026-49353 | decolua 9router up to 0.4.45 Dashboard src/dashboardGuard.js isLocalRequest improper authentication

July 16, 2026 Yanac

A vulnerability was found in decolua 9router up to 0.4.45 and classified as very critical. The affected element is the function isLocalRequest of the file src/dashboardGuard.js of the component Dashboard. Such manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-49353. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More