Exploit for Authorization Bypass Through User-Controlled Key in Vercel Next.Js

🗓️ 06 Dec 2025 07:11:08Reported by cypholabType

githubexploit

githubexploit🔗 github.com👁 168 Views

Exploit for authorization bypass via user controlled key in Vercel Next.js enabling remote code execution.

Reporter	Title	Published	Views	Family All 23
GithubExploit	Exploit for CVE-2024-46982	23 Jan 202503:38	–	githubexploit
GithubExploit	Exploit for Race Condition in Vercel Next.Js	11 Oct 202507:24	–	githubexploit
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	8 Nov 202408:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Pre-Validation App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	20 Nov 202415:23	–	ibm
BDU FSTEC	The vulnerability of the Next.js software platform for creating web applications lies in its ability to bypass authentication by using a user-controlled key. This allows attackers to disclose sensitive information that should be protected.	4 Oct 202400:00	–	bdu_fstec
Chainguard	CVE-2024-46982 vulnerabilities	17 Sep 202422:15	–	cgr
Circl	CVE-2024-46982	18 Sep 202400:49	–	circl
CNNVD	Next.js 安全漏洞	17 Sep 202400:00	–	cnnvd
CVE	CVE-2024-46982	17 Sep 202421:55	–	cve
Cvelist	CVE-2024-46982 Cache Poisoning in next.js	17 Sep 202421:55	–	cvelist

06 Dec 2025 07:13Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.58124

SSVC

authorization bypass user controlled key vercel next js remote code execution cve 2024 46982