Improper Authentication

Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to Improper Authentication via the dashboardGuard.js process. An attacker can gain unauthorized access to sensitive API endpoints by sending requests through a same-host reverse...

PT-2026-20350

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.13 @openclaw/bluebubbles versions prior to 2026.2.13 Description The optional BlueBubbles iMessage channel plugin could accept webhook requests as authenticated based solely on the TCP peer address being...