CVE-2026-75604

CVE-2026-75604 is an unauthenticated remote code execution vulnerability in Windows-hosted Next.js applications. It requires the coexistence of Pages Router and App Router with Cache Components disabled , a dynamic ISR route, and a closure-bound Server Action where encoded backslashes reach Next....