CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

26 matches found

osv_root•added 2026/09/28 7:43 a.m.•44 views

ROOT-APP-NPM-CVE-2026-44575 CVE-2026-44575 in next - Patched by Root

Root has patched CVE-2026-44575 in the next package for Root:npm. Multiple fixed versions available...

7.5CVSS6.9AI score0.01594EPSS

SaveExploits0

F5 Networks•added 2026/08/20 10:39 a.m.•31 views

K000163006: Next.js vulnerability CVE-2026-44575

Security Advisory Description Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorization can allow unauthorized access through transport-specific route...

7.5CVSS7AI score0.01594EPSS

SaveExploits0

vulnersOsv•added 2026/05/13 4:54 p.m.•8 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +840 more potentially affected by CVE-2026-44575 via next (>=15.2.0, <=15.5.15)

next NPM version =15.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44575 Source advisory: MEND:CVE-2026-44575...

7.5CVSS7.2AI score0.01594EPSS

SaveExploits0

Chainguard•added 2026/05/13 1:17 a.m.•37 views

CVE-2026-44575 vulnerabilities

Vulnerabilities for packages: keep...

7.5CVSS7.2AI score0.01594EPSS

SaveExploits0

CNNVD•added 2026/05/13 12:00 a.m.•30 views

Next.js security vulnerabilities

Next.js is a React framework open source by Vercel. There were security vulnerabilities in versions of Next.js from 15.2.0 to 15.5.18, and also in version 16.2.6. These vulnerabilities stemmed from failing to apply the corrections for CVE-2026-44575 when using the Turbopack-based middleware.ts...

7.5CVSS7.1AI score0.00854EPSS

SaveExploits0References1

Github Security Blog•added 2026/05/11 4:21 p.m.•68 views

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

Impact It was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. Refer to CVE-2026-44575 for further details. References - CVE CVE-2026-44575...

7.5CVSS7.1AI score0.01594EPSS

SaveExploits0References14Affected Software1

vulnersOsv•added 2026/05/11 4:21 p.m.•7 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +843 more potentially affected by CVE-2026-44575 +1 more via next (>=15.2.0-canary.64, <=15.5.16)

next NPM version =15.2.0-canary.64, =0.1.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0-beta.7 and more Source cves: CVE-2026-44575, CVE-2026-45109 Source advisory: SNYK:JS-NEXT-16638686...

7.5CVSS7.2AI score0.01594EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 4:21 p.m.•7 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44575 +1 more via next (>=16.0.0-beta.0, <=16.2.5)

next NPM version =16.0.0-beta.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44575,...

7.5CVSS7.2AI score0.01594EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 4:21 p.m.•4 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +761 more potentially affected by CVE-2026-44575 +1 more via next (>=16.0.0, <=16.2.5)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-44575, CVE-2026-45109...

7.5CVSS7.2AI score0.01594EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•5 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +771 more potentially affected by CVE-2026-44575 +1 more via next (>=16.0.0-beta.0, <=16.2.4)

7.5CVSS7.2AI score0.01594EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•15 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +760 more potentially affected by CVE-2026-44575 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.01594EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•5 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +760 more potentially affected by CVE-2026-44575 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.01594EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•14 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +840 more potentially affected by CVE-2026-44575 via next (>=15.2.0, <=15.5.15)

7.5CVSS7.2AI score0.01594EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:54 p.m.•5 views

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +840 more potentially affected by CVE-2026-44575 via next (>=15.2.0, <=15.5.15)

7.5CVSS7.2AI score0.01594EPSS

SaveExploits0

Positive Technologies•added 2026/05/09 12:00 a.m.•26 views

PT-2026-39418

Name of the Vulnerable Software and Affected Versions Next.js versions 14.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description Applications using React Server Components RSC are susceptible to cache poisoning when shared caches fail to correctly partition response variants. An...

5.4CVSS5.9AI score0.00295EPSS

SaveExploits0References15

Positive Technologies•added 2026/05/09 12:00 a.m.•39 views

PT-2026-39417

Name of the Vulnerable Software and Affected Versions Next.js versions 12.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description An external client can send an x-nextjs-data header on a request to a path handled by middleware that returns a redirect. This causes the middleware or...

5.9CVSS5.4AI score0.00284EPSS

SaveExploits0References16

Circl•added 2026/05/08 12:09 p.m.•39 views

CVE-2026-44575

creationtimestamp| type| source ---|---|--- 2026-05-08 12:09:44+00:00| seen| https://www.acn.gov.it/portale/w/next.js-aggiornamenti-di-sicurezza-1 2026-05-11 06:42:58+00:00| published-proof-of-concept| https://t.me/htfgtps/1107 2026-05-27 04:39:56+00:00| seen|...

7.5CVSS7.3AI score0.01594EPSS

SaveExploits0References7

Positive Technologies•added 2026/05/06 12:00 a.m.•69 views

PT-2026-39412

Name of the Vulnerable Software and Affected Versions Next.js versions 13.0.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description Applications using beforeInteractive scripts combined with untrusted content are susceptible to cross-site scripting XSS, a flaw where malicious scripts...

6.4CVSS6.5AI score0.00205EPSS

SaveExploits0References17

Positive Technologies•added 2026/05/06 12:00 a.m.•54 views

PT-2026-39411

Name of the Vulnerable Software and Affected Versions Next.js versions prior to 15.5.16 Next.js versions prior to 16.2.5 Description Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A crafted POST request to a server action can...

7.8CVSS7.1AI score0.00746EPSS

SaveExploits1References30

EUVD•added 2025/11/10 5:21 p.m.•9 views

EUVD-2025-44575

Malicious code in wati-martabak36-sukiwir npm...

6.6AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by