CVE-2026-75604: Next.js: disponibili PoC per 2 vulnerabilità

3 karet z 6 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-75604

EPSS 0.02 EPSS k 18. 10. 2026

Hodnocení závažnosti

9.0 CVSS 3.1 GitHub_M

útok odkudkoli z internetu útok vyžaduje přípravu bez přihlášení bez zásahu uživatele
dopad plný únik dat úplná změna dat úplný výpadek
přesah dopad i mimo zranitelnou součást

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

Metasploit Wrap Up: This One Goes to Sixteen!

This One Goes to Sixteen!Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, and not to be outdone, we even have a Metasploit scanner to watch the watchers!New module content (16)Elasticsearch ingest-attachment Apache Tika XFA XXE Local File ReadAuthors: Bourbon Offensive Security Services and Jean-Marie BourbonType: AuxiliaryPull request: #21739…

KEV ✓ · ransomware EPSS 0.90 CVE-2025-54988 CVE-2025-66516 CVE-2026-19295 CVE-2026-20079 CVE-2026-20929 CVE-2026-23744 CVE-2026-48558 CVE-2026-63077 CVE-2026-75604 CVE-2026-81578 CVE-2026-82078 CVE-2026-83548 CVE-2026-83549 Cisco PaperCut SonicWall JetBrains US

tg: novinka v produktu tg: přehled

· Rapid7 · Metasploit Wrap Up: This One Goes to Sixteen!

31th August – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 31st August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Manchester Airports Group, the UK operator of Manchester, London Stansted, and East Midlands airports, has disclosed a cyberattack that exposed data belonging to about 8.7 million customers. The compromised information includes contact details, vehicle registration numbers, and information collected through car park, lounge, fast-track, and Wi-Fi…

KEV ✓ EPSS 0.86 CVSS 10.0 CVE-2026-18885 CVE-2026-18886 CVE-2026-74820 CVE-2026-75604 CVE-2026-81578 CVE-2026-82078 PaperCut Ubiquiti Vercel ServiceNow IL

tg: incident tg: zneužíváno tg: zranitelnost tg: přehled tp: phishing tp: únik dat tp: AI

· Check Point Research · 31th August – Threat Intelligence Report

SPOJENO PŘES CVE Next.js: disponibili PoC per 2 vulnerabilità

Disponibili Proof of Concept (PoC) per lo sfruttamento di 2 vulnerabilità, già sanate dal vendor, che interessano Next.js, noto framework javascript per la creazione di applicazioni web.

EPSS 0.02 CVSS 9.0 CVE-2026-75604 Next.js Vercel IT FI RO NL

tg: zneužíváno

· CSIRT Itálie (ACN) · Next.js: disponibili PoC per 2 vulnerabilità · zachyceno · NCSC-FI · August 2026 Security Release for Next.js · DNSC Rumunsko · ALERTĂ: Vulnerabilități critice la nivelul NextJS · NCSC-NL · NCSC-2026-0329 [1.00] [H/M] Kwetsbaarheden verholpen in Next.js