VulnSocial

CVE-2026-46339Disclosure

LOWCVSS 10.0 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

9Router is an AI router & token saver. From 0.4.30 until 0.4.37, 9Router's src/proxy.js middleware did not protect /api/cli-tools/* and /api/mcp/*, allowing unauthenticated registration of customPlugins through src/app/api/cli-tools/cowork-settings/route.js and command execution through the MCP bridge. This vulnerability is fixed in 0.4.37.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78CWE-306

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • 6 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 2 mentions (2026-08-29); latest day: 1
  • 6 total mentions across 4 days

Deep dive

Activity timeline6 mentions / 4d
01122Mentions · 2026-07-15: 1Mentions · 2026-08-29: 2Mentions · 2026-09-12: 2Mentions · 2026-10-07: 1PoC Mentioned / Linked · 2026-07-15: 1PoC Mentioned / Linked · 2026-08-29: 1Exploit Tool / Code · 2026-08-29: 1Technical Details · 2026-07-15: 1Technical Details · 2026-09-12: 207-1508-2909-1210-07
Signal classification3 categories
Disclosure
360.0%
General
120.0%
PoC
120.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-151
Disclosure1
2026-08-292
General1PoC1
2026-09-122
Disclosure2
Full discourse6 posts
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2026-46339 - critical 🚨 9Router <= 0.4.36 - Unauthenticated RCE > 9Router <= 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-46339 @pdnuclei #NucleiTemplates #cve

    Post summary

    CVE-2026-46339 is a critical unauthenticated RCE in 9Router versions 0.4.36 and below; the post announces the vulnerability but does not provide patches, active exploitation evidence, or detailed exploit code.

    0301461.8K
    1.3K followersView on X
  • Huntback.io@Huntbackio

    The AI supply chain is already under fire. CVE-2026-46339 (CVSS 10, critical) is an unauthenticated RCE in 9Router, an AI router / token-saver, via its MCP bridge. Unprotected /api/mcp/* lets an attacker register plugins and execute commands with no auth. On our deception network: 362 hits from 312 distinct IPs since Sept 22, with a tight operator cluster on 69.5.169[.]x (DE). As teams bolt MCP into production, the agent layer is now an attack surface. Running 9Router < 0.4.37? Patch now. #ThreatIntel #MCP #AI #RCE

    41150308
    53 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    @pdnuclei Source: X search for CVE-2026 critical Posted: 2026-07-15T05:00:09.000Z Likes: 10 🚨 CVE-2026-46339 - critical 🚨 9Router &amp;lt;= 0.4.36 - Unauthenticated RCE &amp;gt; 9Router &amp;lt;= 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli...

    Post summary

    The tweet announces a critical unauthenticated remote code execution vulnerability in 9Router versions up to 0.4.36, highlighting affected middleware routes.

    1000065
    325 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    CVE-2026-46339: 🚨 CVE-2026-46339 - critical 🚨 9Router &amp;lt;= 0.4.36 - Unauthenticated RCE &amp;gt; 9Router &amp;lt;= 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli... 👾 @pdnuclei #NucleiTemplates #cve (0.4.36)

    Post summary

    A critical unauthenticated RCE vulnerability is disclosed for 9Router versions up to 0.4.36, with the /api/cli endpoint lacking adequate protection.

    1000076
    325 followersView on X
  • ExploitGrid@exploitgrid
    PoC

    [EXPLOIT] EGE-GH-Dzqgga0 [CRITICAL/PoC] Linked: CVE-2026-46339 CTT-Enhanced-CVE-2026-46339-Exploit-Engine 🔗 https://exploitgrid.net/exploits/38aa4566-22f6-43c3-aeee-2f33362fa0d4

    Post summary

    A publicly available PoC/exploit for CVE-2026-46339 is presented via ExploitGrid, confirming that a functional proof of concept exists.

    1000060
    38 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ ExploitGrid Daily Threat Digest Critical Exploits disclosed today: CVE-2026-46339 CVE-2024-45798 CVE-2025-55182 CVE-2025-57819 CVE-2025-59528 ..🧵👇

    Post summary

    The digest merely lists several critical CVEs without providing additional context, details, or actionable information.

    1000071
    38 followersView on X

Explore more

Back to dashboard