Vcth4Nh

**Name of the Vulnerable Software and Affected Versions** 9Router versions prior to 0.4.44 **Description** An OS command injection issue exists due to improper access control. The endpoint "/api/tunnel/tailscale-install" does not require authentication because it is missing from the dashboard middleware matcher. A remote unauthenticated attacker can send a POST request containing a `sudoPassword` variable in the request body. This value is written to the stdin of a `sudo -S sh` child process. In environments where the process runs as root, `NOPASSWD` is configured, or a sudo timestamp cache exists, the `sudoPassword` value is interpreted and executed as a shell command by `sh`. This allows for remote code execution as the user running the 9Router process. Exploitation evidence was first observed by the Shadowserver Foundation on 2026-07-04 (UTC). **Recommendations** Update 9Router to version 0.4.44 or later. As a temporary mitigation, restrict access to the "/api/tunnel/tailscale-install" endpoint to prevent unauthenticated remote access.

**Name of the Vulnerable Software and Affected Versions** a-blog cms (affected versions not specified) **Description** A server-side request forgery vulnerability exists in a-blog cms, allowing a remote unauthenticated attacker to gain access to sensitive information by sending a specially crafted request. The estimated number of potentially affected devices worldwide is over 5,000. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: a-blog cms versions (affected versions not specified) Description: The issue is related to improper neutralization of logs. A remote unauthenticated attacker may hijack a legitimate user's session if the vulnerability is exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GoAnywhere MFT versions prior to 7.4.2 **Description** A path traversal issue exists, allowing attackers to circumvent endpoint-specific permission checks in the GoAnywhere Admin and Web Clients. **Recommendations** For versions prior to 7.4.2, update to version 7.4.2 or later to resolve the issue.