CVE-2026-49352 | decolua 9router up to 0.4.43 JWT Authentication route.js login hard-coded credentials

A vulnerability classified as problematic was found in decolua 9router up to 0.4.43. This affects the function Login of the file src/app/api/auth/login/route.js of the component JWT Authentication. Executing a manipulation can lead to hard-coded credentials.

The identification of this vulnerability is CVE-2026-49352. The attack may be launched remotely. There is no exploit available.