A vulnerability marked as critical has been reported in decolua 9router up to 0.3.47. The impacted element is an unknown function of the file /api of the component Administrative API Endpoint. The manipulation leads to authorization bypass.

This vulnerability is uniquely identified as CVE-2026-5842. The attack is possible to be carried out remotely. Moreover, an exploit is present.

It is suggested to upgrade the affected component.