CVE-2026-5842: decolua 9router Administrative API Endpoint api authorization
A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted element is an unknown function of the file /api of the component Administrative API Endpoint. The manipulation leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.3.75 is sufficient to resolve this issue. It is suggested to upgrade the affected component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5842?
The severity of CVE-2026-5842 is classified as high due to the potential for unauthorized access.
How do I fix CVE-2026-5842?
To fix CVE-2026-5842, update the decolua 9router to version 0.3.48 or later.
What causes CVE-2026-5842?
CVE-2026-5842 is caused by an authorization bypass vulnerability in the Administrative API Endpoint of decolua 9router.
What components are affected by CVE-2026-5842?
CVE-2026-5842 affects the Administrative API Endpoint in the decolua 9router software up to version 0.3.47.
Can CVE-2026-5842 be exploited remotely?
Yes, CVE-2026-5842 can be exploited remotely, allowing attackers to bypass authorization controls.