9 matches found
CVE-2026-32662
Development and test API endpoints are present that mirror production functionality...
EUVD-2026-18847
Development and test API endpoints are present that mirror production functionality...
CVE-2026-32662
Development and test API endpoints are present that mirror production functionality...
CVE-2026-32662
Development and test API endpoints are present that mirror production functionality...
CVE-2026-32662 Gardyn Cloud API Active Debug Code
Development and test API endpoints are present that mirror production functionality...
CVE-2026-32662
Technical details about CVE-2026-32662 are not provided in the supplied documents. Monitor for updates from vendors and security advisories.
CVE-2026-32662 Gardyn Cloud API Active Debug Code
Development and test API endpoints are present that mirror production functionality...
PT-2026-30215
Development and test API endpoints are present that mirror production functionality...
GHSA-JCC7-9WPM-MJ36 Next.js: null origin can bypass dev HMR websocket CSRF checks
Summary In next dev, cross-site protections for internal development endpoints could treat Origin: null as a bypass case even when allowedDevOrigins is configured. This could allow privacy-sensitive or opaque browser contexts, such as sandboxed documents, to access privileged internal dev-server...