All vulnerabilities
CVE-2026-103530

decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery

decolua 9Router
Open in ThreatlineRecord JSON
CVSS
6.9Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.30%Chance of exploitation activity in the next 30 days, higher than 21% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published30 Sep 2026Updated 1 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provider_options.baseUrl results in server-side request forgery. The attack can be initiated remotely. Applying a patch is the recommended action to fix this issue.

Text from CVE List

Affected versions 30

  • 9Routeraffected: 0.5.0CVE List
  • 9Routeraffected: 0.5.1CVE List
  • 9Routeraffected: 0.5.2CVE List
  • 9Routeraffected: 0.5.3CVE List
  • 9Routeraffected: 0.5.4CVE List
  • 9Routeraffected: 0.5.5CVE List
  • 9Routeraffected: 0.5.6CVE List
  • 9Routeraffected: 0.5.7CVE List
  • 9Routeraffected: 0.5.8CVE List
  • 9Routeraffected: 0.5.9CVE List
  • 9Routeraffected: 0.5.10CVE List
  • 9Routeraffected: 0.5.11CVE List
  • 9Routeraffected: 0.5.12CVE List
  • 9Routeraffected: 0.5.13CVE List
  • 9Routeraffected: 0.5.14CVE List
  • 9Routeraffected: 0.5.15CVE List
  • 9Routeraffected: 0.5.16CVE List
  • 9Routeraffected: 0.5.17CVE List
  • 9Routeraffected: 0.5.18CVE List
  • 9Routeraffected: 0.5.19CVE List
  • 9Routeraffected: 0.5.20CVE List
  • 9Routeraffected: 0.5.21CVE List
  • 9Routeraffected: 0.5.22CVE List
  • 9Routeraffected: 0.5.23CVE List
  • 9Routeraffected: 0.5.24CVE List
  • 9Routeraffected: 0.5.25CVE List
  • 9Routeraffected: 0.5.26CVE List
  • 9Routeraffected: 0.5.27CVE List
  • 9Routeraffected: 0.5.28CVE List
  • 9Routeraffected: 0.5.29CVE List

References 7