{"cve_id":"CVE-2026-46339","title":"9Router <= 0.4.36 - Unauthenticated RCE","severity":"critical","actively_exploited":false,"patterns":["/api/mcp//sse","/api/version","/api/cli-tools/cowork-settings"],"events":708,"unique_ips":80,"actors":[{"ip":"176.65.149.180","events":396,"country_code":"NL","country":"Netherlands","org":"Pfcloud UG (haftungsbeschrankt)","rdns":"176.65.149.180.ptr.pfcloud.network","scanner_tag":null},{"ip":"172.93.106.153","events":38,"country_code":"US","country":"United States","org":"ReliableSite.Net LLC","rdns":"","scanner_tag":null},{"ip":"104.243.35.45","events":33,"country_code":"US","country":"United States","org":"ReliableSite.Net LLC","rdns":"","scanner_tag":null},{"ip":"185.150.191.236","events":18,"country_code":"US","country":"United States","org":"ReliableSite.Net LLC","rdns":"","scanner_tag":null},{"ip":"95.182.96.193","events":18,"country_code":"FR","country":"France","org":"Cgi Global Limited","rdns":"","scanner_tag":null},{"ip":"66.154.119.224","events":16,"country_code":"US","country":"United States","org":"CYBERCON, INC.","rdns":"","scanner_tag":null},{"ip":"209.222.101.194","events":15,"country_code":"US","country":"United States","org":"ReliableSite.Net LLC","rdns":"","scanner_tag":null},{"ip":"179.43.163.26","events":14,"country_code":"CH","country":"Switzerland","org":"Private Layer INC","rdns":"hosted-by.privatelayer.com","scanner_tag":null},{"ip":"49.204.105.53","events":14,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.106.215","events":11,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"157.254.194.17","events":8,"country_code":"US","country":"United States","org":"12651980 CANADA INC.","rdns":"","scanner_tag":null},{"ip":"77.243.184.184","events":7,"country_code":"GB","country":"United Kingdom","org":"M247 Europe SRL","rdns":"","scanner_tag":null},{"ip":"104.243.32.235","events":5,"country_code":"US","country":"United States","org":"ReliableSite.Net LLC","rdns":"","scanner_tag":null},{"ip":"185.245.182.49","events":5,"country_code":"FR","country":"France","org":"Contabo GmbH","rdns":"vmi3403200.contaboserver.net","scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"}},{"ip":"38.127.60.25","events":4,"country_code":"US","country":"United States","org":"Enzu Inc","rdns":"25.60-127-38.rdns.scalabledns.com","scanner_tag":null},{"ip":"130.12.180.57","events":4,"country_code":"NL","country":"The Netherlands","org":"Omegatech LTD","rdns":"","scanner_tag":null},{"ip":"104.243.41.28","events":4,"country_code":"US","country":"United States","org":"ReliableSite.Net LLC","rdns":"","scanner_tag":null},{"ip":"146.70.198.81","events":4,"country_code":"CA","country":"Canada","org":"M247 Europe SRL","rdns":"","scanner_tag":null},{"ip":"93.88.156.59","events":3,"country_code":"CH","country":"Switzerland","org":"Proton AG","rdns":"","scanner_tag":null},{"ip":"49.204.105.87","events":3,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.106.149","events":3,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.109.255","events":3,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.104.32","events":3,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"93.88.156.3","events":3,"country_code":"CH","country":"Switzerland","org":"Proton AG","rdns":"","scanner_tag":null},{"ip":"202.112.47.45","events":3,"country_code":"CN","country":"China","org":"China Education and Research Network Center","rdns":"","scanner_tag":null},{"ip":"104.243.32.126","events":3,"country_code":"US","country":"United States","org":"ReliableSite.Net LLC","rdns":"","scanner_tag":null},{"ip":"49.204.108.36","events":3,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.108.121","events":3,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.104.196","events":2,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.104.112","events":2,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"35.212.182.60","events":2,"country_code":"US","country":"United States","org":"Google LLC","rdns":"60.182.212.35.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"49.204.108.85","events":2,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"202.112.47.209","events":2,"country_code":"CN","country":"China","org":"China Education and Research Network Center","rdns":"","scanner_tag":null},{"ip":"49.204.104.173","events":2,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"87.121.79.146","events":2,"country_code":"BG","country":"Bulgaria","org":"Alvaro Navas","rdns":"","scanner_tag":null},{"ip":"49.204.111.119","events":2,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.110.51","events":2,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.110.227","events":2,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.107.20","events":2,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"49.204.104.158","events":2,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"54.189.48.172","events":1,"country_code":"US","country":"United States","org":"Amazon.com, Inc.","rdns":"ec2-54-189-48-172.us-west-2.compute.amazonaws.com","scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"}},{"ip":"221.232.101.6","events":1,"country_code":"CN","country":"China","org":"Chinanet","rdns":"","scanner_tag":null},{"ip":"49.204.107.26","events":1,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"82.24.232.16","events":1,"country_code":"HR","country":"Croatia","org":"4Tel Telekomunikacije d.o.o.","rdns":"","scanner_tag":null},{"ip":"194.193.34.145","events":1,"country_code":"AU","country":"Australia","org":"TPG Telecom Limited","rdns":"194-193-34-145.tpgi.com.au","scanner_tag":null},{"ip":"104.243.35.92","events":1,"country_code":"US","country":"United States","org":"ReliableSite.Net LLC","rdns":"","scanner_tag":null},{"ip":"52.53.3.210","events":1,"country_code":"US","country":"United States","org":"Amazon.com, Inc.","rdns":"ec2-52-53-3-210.us-west-1.compute.amazonaws.com","scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"}},{"ip":"49.204.111.233","events":1,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null},{"ip":"35.90.217.191","events":1,"country_code":"US","country":"United States","org":"Amazon.com, Inc.","rdns":"ec2-35-90-217-191.us-west-2.compute.amazonaws.com","scanner_tag":{"key":"aws","label":"Amazon AWS","category":"hosting_provider","url":"https://aws.amazon.com/"}},{"ip":"49.204.105.186","events":1,"country_code":"IN","country":"India","org":"Atria Convergence Technologies Ltd.,","rdns":"broadband.actcorp.in","scanner_tag":null}],"top_asns":[{"asn":51396,"org":"Pfcloud UG (haftungsbeschrankt)","events":396,"ips":1},{"asn":23470,"org":"ReliableSite.Net LLC","events":118,"ips":9},{"asn":55577,"org":"Atria Convergence Technologies Ltd.,","events":83,"ips":39},{"asn":56971,"org":"Cgi Global Limited","events":18,"ips":1},{"asn":7393,"org":"CYBERCON, INC.","events":16,"ips":1},{"asn":51852,"org":"Private Layer INC","events":14,"ips":1},{"asn":9009,"org":"M247 Europe SRL","events":11,"ips":2},{"asn":16509,"org":"Amazon.com, Inc.","events":8,"ips":8},{"asn":399486,"org":"12651980 CANADA INC.","events":8,"ips":1},{"asn":4538,"org":"China Education and Research Network Center","events":6,"ips":3}],"fingerprints":{"ja4h":["ge11nn06en_34bb3a836f3b","ge11nn0400_628fde536a8d","ge11nn0300_0db47b7d240d","ge11nn0700_131b6413da1e","ge11nn0500_e161b8ad0830","ge11nn0500_297583b23a58"],"ja4":["t13i5911h1_a33745022dd6_dbd39dd1d406","t13i5910h1_a33745022dd6_1f22a2ca17c4","t13i351200_bfa337485184_678a800b2221","t13i131000_f57a46bbacb6_ab7e3b40a677"]},"sample_paths":["/api/version","/api/version/","/console/api/version"],"timeline":[{"day":"2026-05-04","events":25,"ips":9},{"day":"2026-05-05","events":13,"ips":5},{"day":"2026-05-06","events":7,"ips":1},{"day":"2026-05-07","events":7,"ips":1},{"day":"2026-05-08","events":7,"ips":1},{"day":"2026-05-09","events":7,"ips":1},{"day":"2026-05-10","events":6,"ips":1},{"day":"2026-05-11","events":10,"ips":2},{"day":"2026-05-12","events":9,"ips":1},{"day":"2026-05-13","events":7,"ips":1},{"day":"2026-05-14","events":9,"ips":1},{"day":"2026-05-15","events":5,"ips":1},{"day":"2026-05-16","events":7,"ips":1},{"day":"2026-05-17","events":4,"ips":1},{"day":"2026-05-18","events":6,"ips":1},{"day":"2026-05-19","events":5,"ips":1},{"day":"2026-05-20","events":6,"ips":1},{"day":"2026-05-21","events":5,"ips":1},{"day":"2026-05-22","events":6,"ips":1},{"day":"2026-05-23","events":5,"ips":1},{"day":"2026-05-24","events":5,"ips":1},{"day":"2026-05-25","events":4,"ips":1},{"day":"2026-05-26","events":7,"ips":2},{"day":"2026-05-27","events":5,"ips":1},{"day":"2026-05-28","events":7,"ips":1},{"day":"2026-05-29","events":5,"ips":1},{"day":"2026-05-30","events":7,"ips":1},{"day":"2026-05-31","events":9,"ips":1},{"day":"2026-06-01","events":7,"ips":1},{"day":"2026-06-02","events":6,"ips":1},{"day":"2026-06-03","events":8,"ips":1},{"day":"2026-06-04","events":9,"ips":1},{"day":"2026-06-05","events":7,"ips":1},{"day":"2026-06-06","events":4,"ips":1},{"day":"2026-06-07","events":5,"ips":1},{"day":"2026-06-08","events":4,"ips":1},{"day":"2026-06-09","events":5,"ips":1},{"day":"2026-06-10","events":13,"ips":4},{"day":"2026-06-11","events":17,"ips":3},{"day":"2026-06-12","events":17,"ips":5},{"day":"2026-06-13","events":10,"ips":3},{"day":"2026-06-14","events":4,"ips":1},{"day":"2026-06-15","events":9,"ips":2},{"day":"2026-06-16","events":8,"ips":2},{"day":"2026-06-17","events":5,"ips":1},{"day":"2026-06-18","events":13,"ips":5},{"day":"2026-06-19","events":7,"ips":2},{"day":"2026-06-20","events":11,"ips":5},{"day":"2026-06-21","events":9,"ips":4},{"day":"2026-06-22","events":10,"ips":5},{"day":"2026-06-23","events":8,"ips":5},{"day":"2026-06-24","events":11,"ips":4},{"day":"2026-06-25","events":11,"ips":4},{"day":"2026-06-26","events":21,"ips":11},{"day":"2026-06-27","events":19,"ips":2},{"day":"2026-06-28","events":11,"ips":2},{"day":"2026-06-29","events":29,"ips":6},{"day":"2026-06-30","events":6,"ips":1},{"day":"2026-07-01","events":13,"ips":5},{"day":"2026-07-02","events":14,"ips":5},{"day":"2026-07-03","events":10,"ips":5},{"day":"2026-07-04","events":11,"ips":2},{"day":"2026-07-05","events":7,"ips":2},{"day":"2026-07-06","events":16,"ips":6},{"day":"2026-07-07","events":12,"ips":4},{"day":"2026-07-08","events":4,"ips":2},{"day":"2026-07-09","events":9,"ips":4},{"day":"2026-07-10","events":10,"ips":3},{"day":"2026-07-11","events":12,"ips":5},{"day":"2026-07-12","events":7,"ips":4},{"day":"2026-07-14","events":22,"ips":6},{"day":"2026-07-15","events":4,"ips":3},{"day":"2026-07-16","events":1,"ips":1},{"day":"2026-07-17","events":1,"ips":1},{"day":"2026-07-18","events":2,"ips":2},{"day":"2026-07-19","events":1,"ips":1},{"day":"2026-07-20","events":2,"ips":1},{"day":"2026-07-21","events":2,"ips":2},{"day":"2026-07-22","events":2,"ips":2},{"day":"2026-07-23","events":2,"ips":1},{"day":"2026-07-24","events":1,"ips":1},{"day":"2026-07-25","events":6,"ips":1},{"day":"2026-07-26","events":13,"ips":3},{"day":"2026-07-27","events":14,"ips":5},{"day":"2026-07-28","events":1,"ips":1}],"window_hours":2160}