CVE-2026-64642

creationtimestamp| type| source ---|---|--- 2026-07-31 15:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrxa7f2zep2m...

Next.js Framework 16.x < 16.2.11 Middleware Bypass

The Next.js Framework on the remote host is affected by an authentication bypass vulnerability: - Crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. CVE-2026-64642 Note...

CVE-2026-64642 vulnerabilities

Vulnerabilities for packages: homepage, peerdb-ui, langfuse, langfuse-fips...