Vulners
Lucene search
CVE-2026-44578
๐๏ธย 13 May 2026ย 17:01:38Reported byย GitHub_MTypeย 
ย cve๐ย web.nvd.nist.gov๐ฐ๏ธย 2ย Media mentions๐ย 28ย Views๐ WEB
| Reporter | Title | Published | Views | Family All 23 |
|---|---|---|---|---|
 | Exploit for Server-Side Request Forgery in Vercel Next.Js | 1 Jun 202605:34 | โ | githubexploit |
| Exploit for CVE-2026-23870 | 7 May 202623:00 | โ | githubexploit |
| patch-to-exploit | 26 May 202616:02 | โ | githubexploit |
| Exploit for Server-Side Request Forgery in Vercel Next.Js | 15 May 202605:02 | โ | githubexploit |
| Exploit for Server-Side Request Forgery in Vercel Next.Js | 15 May 202609:02 | โ | githubexploit |
| Exploit for Server-Side Request Forgery in Vercel Next.Js | 16 May 202610:15 | โ | githubexploit |
| Exploit for Server-Side Request Forgery in Vercel Next.Js | 15 May 202617:14 | โ | githubexploit |
 | CVE-2026-44578 vulnerabilities | 13 May 202601:17 | โ | cgr |
 | CVE-2026-44578 | 7 May 202623:40 | โ | circl |
 | Next.js ไปฃ็ ้ฎ้ขๆผๆด | 13 May 202600:00 | โ | cnnvd |
10
[
{
"vendor": "vercel",
"product": "next.js",
"versions": [
{
"version": ">= 16.0.0, < 16.2.5",
"status": "affected"
},
{
"version": ">= 13.4.13, < 15.5.16",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| latest/meta-data/iam/security-credentials/ROLE | path | /latest/meta-data/iam/security-credentials/ROLE | SSRF via WebSocket upgrade allowing proxy to localhost:80 to access internal metadata/credentials | CWE-918 |
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 May 2026 18:34Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.18.6
EPSS0.0581
SSVC