next.js: Next.js: Unauthorized access to protected content via middleware bypass

🗓️ 02 Jul 2026 00:03:15Reported by RedHatType

Next.js App Router with middleware checks is vulnerable to unauthorized access via crafted .rsc and segment-prefetch URLs.

Reporter	Title	Published	Views	Family All 27
ATTACKERKB	CVE-2026-44575	13 May 202616:54	–	attackerkb
BDU FSTEC	The vulnerability of the App Router module in the Next.js software development platform allows attackers to disclose sensitive information that should be protected.	2 Jul 202600:00	–	bdu_fstec
Chainguard	CVE-2026-44575 vulnerabilities	13 May 202601:17	–	cgr
Circl	CVE-2026-44575	8 May 202612:09	–	circl
CNNVD	Next.js 安全漏洞	13 May 202600:00	–	cnnvd
CVE	CVE-2026-44575	13 May 202616:54	–	cve
Cvelist	CVE-2026-44575 Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes	13 May 202616:54	–	cvelist
Github Security Blog	Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes	11 May 202615:54	–	github
Github Security Blog	Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up	11 May 202616:21	–	github
Tenable Nessus	Next.js Framework 15.2.x < 15.5.16 / 16.x < 16.2.5 Authorization Bypass	15 May 202600:00	–	nessus

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-44575
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-44575
cve	www.cve.org/CVERecord

03 Jul 2026 17:47Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

EPSS0.01416

SSVC