VULNRABLE / Vulnerability / CVE-2026-55641

CVE-2026-55641

HIGH LOW 9router GHSA

Exploit verdict: No active-exploit signal

CVSS Score
8
Severity
HIGH
EPSS
0%
Source
GHSA

Summary

9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF

What this means

CVE-2026-55641 is a high-severity vulnerability affecting 9router, rated CVSS 8. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published August 29, 2026.

View full advisory at GHSA →