{"metadata": {"vulnerability": "CVE-2026-49352", "count": 20, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-05-29T14:35:45.903Z", "date_only": false, "value": "2026-05-29T14:35:45.903Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-49352", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-02T20:56:55Z", "date_only": false, "value": "2026-07-02T20:56:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JPHH-M39H-6GWX", "record": "GHSA-JPHH-M39H-6GWX", "field": "published"}, {"timestamp": "2026-07-02T20:56:55Z", "date_only": false, "value": "2026-07-02T20:56:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JPHH-M39H-6GWX", "record": "GHSA-JPHH-M39H-6GWX", "field": "modified"}, {"timestamp": "2026-07-02T22:35:02.831Z", "date_only": false, "value": "2026-07-02T22:35:02.831369Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/decolua/9router/security/advisories/GHSA-jphh-m39h-6gwx", "record": "CVE-2026-49352", "field": "creation_timestamp", "uuid": "8e330481-1ad0-4eb0-99db-100170fa4b24", "url": "https://github.com/decolua/9router/security/advisories/GHSA-jphh-m39h-6gwx"}, {"timestamp": "2026-07-03T21:58:06.747Z", "date_only": false, "value": "2026-07-03T21:58:06.747307Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprk4i62nu2j", "record": "CVE-2026-49352", "field": "creation_timestamp", "uuid": "688e40cf-0b21-464e-8a79-c2cf38892fce", "content": "CVE-2026-49352 - 9router\n9router's default secret is hardcoded and publicly known, allowing unauthorized users to access the dashboard and API if the server's JWT secret is not set. This vulnerability\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#9router #decolua #npm #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mprk4i62nu2j"}, {"timestamp": "2026-07-13T22:00:10.834Z", "date_only": false, "value": "2026-07-13T22:00:10.834247Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92231", "record": "CVE-2026-49352", "field": "creation_timestamp", "uuid": "62512c32-f0e6-4d16-ab36-1bad46c02e74", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-49352-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a covepseng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 17:51:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92231"}, {"timestamp": "2026-07-15T00:00:30.933Z", "date_only": false, "value": "2026-07-15T00:00:30.933124Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92231", "record": "CVE-2026-49352", "field": "creation_timestamp", "uuid": "ea7a1b6c-efb1-4712-8dbf-5deb62fc2132", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-49352-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a covepseng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 17:51:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploitability PoC for CVE-2026-49352 (9router Hardcoded JWT Secret Authentication Bypass)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92231"}, {"timestamp": "2026-07-15T20:43:41.168Z", "date_only": false, "value": "2026-07-15T20:43:41.168Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-49352", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-15T20:43:41.168Z", "date_only": false, "value": "2026-07-15T20:43:41.168Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-49352", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-15T21:16:53.743Z", "date_only": false, "value": "2026-07-15T21:16:53.743", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49352", "record": "FKIE_CVE-2026-49352", "field": "published"}, {"timestamp": "2026-07-16T00:14:35.529Z", "date_only": false, "value": "2026-07-16T00:14:35.529076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxdmptly22", "record": "CVE-2026-49352", "field": "creation_timestamp", "uuid": "d57825b5-3f79-4f4e-88b3-f226748bbf2b", "content": "CVE-2026-49352 - 9Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypass\nCVE ID : CVE-2026-49352\n \n Published : July 15, 2026, 9:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : 9Router is an AI router & token saver. From 0.2.21 until 0.4.44, 9Router u...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxdmptly22"}, {"timestamp": "2026-07-16T18:55:22.519Z", "date_only": false, "value": "2026-07-16T18:55:22.519146Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-49352", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-16T18:55:22.519Z", "date_only": false, "value": "2026-07-16T18:55:22.519146Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49352", "record": "FKIE_CVE-2026-49352", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-16T18:55:46.479Z", "date_only": false, "value": "2026-07-16T18:55:46.479Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-49352", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-16T18:55:46.479Z", "date_only": false, "value": "2026-07-16T18:55:46.479Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-49352", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-16T19:00:20.411Z", "date_only": false, "value": "2026-07-16T19:00:20.411188Z", "kind": "sighting", "label": "Seen", "source": "Telegram/YXp3PmsKI-RtSlTiFx3LPWyL-Cii7iOu_xJp1uY-0uO5YWA", "record": "CVE-2026-49352", "field": "creation_timestamp", "uuid": "ad089a69-55be-4ae2-ab4a-bc0351eebb41"}, {"timestamp": "2026-07-16T19:00:20.853Z", "date_only": false, "value": "2026-07-16T19:00:20.853718Z", "kind": "sighting", "label": "Seen", "source": "Telegram/G9HreL550hRAFaAR8qW2BMwez1E27QUu1xHndCMIzM5T1KA", "record": "CVE-2026-49352", "field": "creation_timestamp", "uuid": "9996967a-c2c4-488f-b7ec-b92f89ab3d46"}, {"timestamp": "2026-07-16T19:16:49.870Z", "date_only": false, "value": "2026-07-16T19:16:49.870", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49352", "record": "FKIE_CVE-2026-49352", "field": "lastModified"}, {"timestamp": "2026-07-18T00:00:23.409Z", "date_only": false, "value": "2026-07-18T00:00:23.409567Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/G9HreL550hRAFaAR8qW2BMwez1E27QUu1xHndCMIzM5T1KA", "record": "CVE-2026-49352", "field": "creation_timestamp", "uuid": "5ca9677a-1d21-4179-bc74-9bf71f572345"}, {"timestamp": "2026-07-18T00:00:23.625Z", "date_only": false, "value": "2026-07-18T00:00:23.625179Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YXp3PmsKI-RtSlTiFx3LPWyL-Cii7iOu_xJp1uY-0uO5YWA", "record": "CVE-2026-49352", "field": "creation_timestamp", "uuid": "d5221ece-ddf8-4d5a-a1f9-366e3746aef9"}]}