CVE report
CVE-2026-46339critical
9Router <= 0.4.36 - Unauthenticated RCE
Events 90d
703
Distinct IPs
77
Severity
critical
CISA KEV
Not listed
Detection signature
An event counts toward CVE-2026-46339 when its URL path contains any of these (case-insensitive). This is what our matching is based on.
- · /api/mcp//sse
- · /api/version
- · /api/cli-tools/cowork-settings
Pre-disclosure activity
all early actors →Analysing probe history around the publication date…
Recent probe volume (last 7 days)
peak: 29 events/dayeventsdistinct IPs
Downloads & integrations
Top sources probing for CVE-2026-46339
- 176.65.149.180396 eventsNetherlands· Pfcloud UG (haftungsbeschrankt)
- 172.93.106.15339 eventsUnited States· ReliableSite.Net LLC
- 104.243.35.4533 eventsUnited States· ReliableSite.Net LLC
- 185.150.191.23618 eventsUnited States· ReliableSite.Net LLC
- 95.182.96.19318 eventsFrance· Cgi Global Limited
- 66.154.119.22416 eventsUnited States· CYBERCON, INC.
- 209.222.101.19415 eventsUnited States· ReliableSite.Net LLC
- 179.43.163.2614 eventsSwitzerland· Private Layer INC
- 49.204.105.5314 eventsIndia· Atria Convergence Technologies Ltd.,
- 157.254.194.178 eventsUnited States· 12651980 CANADA INC.
- 77.243.184.1847 eventsUnited Kingdom· M247 Europe SRL
- 49.204.106.2156 eventsIndia· Atria Convergence Technologies Ltd.,
- 104.243.32.2356 eventsUnited States· ReliableSite.Net LLC
- 185.245.182.495 eventsFrance
- 38.127.60.254 eventsUnited States· Enzu Inc
- 104.243.41.284 eventsUnited States· ReliableSite.Net LLC
- 146.70.198.814 eventsCanada· M247 Europe SRL
- 130.12.180.574 eventsThe Netherlands· Omegatech LTD
- 104.243.32.1263 eventsUnited States· ReliableSite.Net LLC
- 49.204.108.1213 eventsIndia· Atria Convergence Technologies Ltd.
- 93.88.156.593 eventsSwitzerland· Proton AG
- 49.204.109.2553 eventsIndia· Atria Convergence Technologies Ltd.,
- 93.88.156.33 eventsSwitzerland· Proton AG
- 49.204.105.873 eventsIndia· Atria Convergence Technologies Ltd.,
- 49.204.106.1493 eventsIndia· Atria Convergence Technologies Ltd.
- 202.112.47.453 eventsChina· China Education and Research Network Center
- 49.204.104.323 eventsIndia· Atria Convergence Technologies Ltd.
- 49.204.108.363 eventsIndia· Atria Convergence Technologies Ltd.,
- 49.204.111.1192 eventsIndia· Atria Convergence Technologies Ltd.,
- 49.204.108.852 eventsIndia· Atria Convergence Technologies Ltd.,
Top networks the attempts come from
- AS51396 Pfcloud UG (haftungsbeschrankt)1 IPs · 396 ev
- AS23470 ReliableSite.Net LLC10 IPs · 122 ev
- AS55577 Atria Convergence Technologies Ltd.,39 IPs · 78 ev
- AS56971 Cgi Global Limited1 IPs · 18 ev
- AS7393 CYBERCON, INC.1 IPs · 16 ev
- AS51852 Private Layer INC1 IPs · 14 ev
- AS9009 M247 Europe SRL2 IPs · 11 ev
- AS399486 12651980 CANADA INC.1 IPs · 8 ev
- AS4538 China Education and Research Network Center3 IPs · 6 ev
- AS199218 Proton AG2 IPs · 6 ev
Fingerprints of the clients exploiting this
The HTTP (JA4H) and TLS (JA4) fingerprints seen on these attempts. Click one to see the whole population that carries it.
ja4h: ge11nn06en_34bb3a836f3bja4h: ge11nn0400_628fde536a8dja4h: ge11nn0300_0db47b7d240dja4h: ge11nn0700_131b6413da1eja4h: ge11nn0500_e161b8ad0830ja4h: ge11nn0500_297583b23a58ja4: t13i5911h1_a33745022dd6_dbd39dd1d406ja4: t13i5910h1_a33745022dd6_1f22a2ca17c4ja4: t13i351200_bfa337485184_678a800b2221ja4: t13i131000_f57a46bbacb6_ab7e3b40a677
Sample request paths observed
- /api/version
- /api/version/
- /console/api/version