covepseng/cve-2026-49352-poc

PoC

Exploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass)

view exploit source poc_in_githubauthor covepsengpublished 2026-07-06catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-49352US	—OT elevated	0.60% (49th)	Exploit	2026-07-15
9Router is an AI router & token saver. From 0.2.21 until 0.4.44, 9Router used the hardcoded fallback JWT secret 9router-default-secret-change-me in src/app/api/auth/login/route.js,…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.