Výsledky hledání

SPOJENO PŘES CVE Next.js: disponibili PoC per 2 vulnerabilità

Disponibili Proof of Concept (PoC) per lo sfruttamento di 2 vulnerabilità, già sanate dal vendor, che interessano Next.js, noto framework javascript per la creazione di applicazioni web.

EPSS 0.02 CVSS 9.0 CVE-2026-75604 Next.js Vercel IT FI RO NL

tg: zneužíváno

31. 8. 11:15 · CSIRT Itálie (ACN) · Next.js: disponibili PoC per 2 vulnerabilità 28. 8. 04:00 · NCSC-FI · August 2026 Security Release for Next.js 27. 8. 15:51 · DNSC Rumunsko · ALERTĂ: Vulnerabilități critice la nivelul NextJS 26. 8. 11:57 · NCSC-NL · NCSC-2026-0329 [1.00] [H/M] Kwetsbaarheden verholpen in Next.js

Next.js security advisory (AV26-851)

Serial Number: AV26-851Date: August 26, 2026 As of August 25, 2026, Next.js is affected by critical vulnerabilities in the following product: js Version 15.5 prior to 15.5.24 Version 16.3 prior to 16.3.3 The Cyber Centre encourages users and administrators to review the web link provided and apply any necessary updates as they become available. August 2026 Security Release

Next.js CA

26. 8. 17:34 · Cyber Centre Kanada · Next.js security advisory (AV26-851)

UAT-10608 Campaign Abuses React2Shell for Cloud Credential Harvesting (Campaign)

An automated campaign attributed to threat cluster UAT-10608 is exploiting vulnerable Next.js applications to achieve pre-authentication remote code execution and deploy a multi-phase credential harvesting framework. The operation has compromised hundreds of hosts across cloud...

Next.js US

2. 4. 02:00 · Wiz Research · UAT-10608 Campaign Abuses React2Shell for Cloud Credential Harvesting (Campaign)