URL has been copied successfully!
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE


Tags: , , , , , ,

Credit: HacktronVercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem.The Windows path traversal, tracked as CVE-2026-75604&

First seen on thehackernews.com

Jump to article: thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. Microsoft’s January 2025 Patch Tuesday Addresses 157 CVEs (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335)
  2. Attackers exploit critical Langflow RCE within hours as CISA sounds alarm
  3. Attackers exploit critical Langflow RCE within hours as CISA sounds alarm
  4. Microsoft’s April 2026 Patch Tuesday Addresses 163 CVEs (CVE-2026-32201)