CVE-2026-10269: decolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorization
A security vulnerability has been detected in decolua 9router up to 0.4.0. This issue affects the function isAuthenticated of the file src/dashboardGuard.js of the component HTTP Header Handler. The manipulation of the argument Host leads to improper authorization. The attack is possible to be carried out remotely. Upgrading to version 0.4.1 is capable of addressing this issue. The identifier of the patch is 428e2c045cb9c0eb8080e8b580471a9c2eaa95ca. Upgrading the affected component is recommended.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
decolua 9routerto a version that resolves this vulnerability.Fixed in 0.4.1Patch 428e2c045cb9c0eb8080e8b580471a9c2eaa95ca - Upgrade
Upgrade
decolua 9router (HTTP Header Handler: src/dashboardGuard.js isAuthenticated)to a version that resolves this vulnerability.Fixed in 0.4.1Patch 428e2c045cb9c0eb8080e8b580471a9c2eaa95ca
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10269?
The severity of CVE-2026-10269 is rated as medium with a score of 5.3.
What are the potential impacts of CVE-2026-10269?
CVE-2026-10269 can lead to improper authorization, allowing an attacker to manipulate the argument Host for unauthorized access.
How do I fix CVE-2026-10269?
To fix CVE-2026-10269, update to a patched version of decolua 9router that addresses the improper authorization in src/dashboardGuard.js.
Which versions are affected by CVE-2026-10269?
CVE-2026-10269 affects decolua 9router versions up to 0.4.0.
Where can I find more information about CVE-2026-10269?
Details about CVE-2026-10269 can be found on various vulnerability databases.