CVE-2026-23864

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 27, 2026

Last Seen

May 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in React and Next.js Require Immediate Updates72.0

Multiple critical vulnerabilities affecting React Server Components and .js have been disclosed, including denial of service, server-side request forgery, and middleware bypass issues. These flaws impact versions 13.x to 16.x of .js and 19.x of React Server Components. Vercel has released patches fo...

Critical Vulnerabilities in React Server Components Enable DoS Attacks18.8

Multiple critical vulnerabilities have been disclosed in React Server Components, allowing attackers to execute Denial-of-Service (DoS) attacks. The vulnerabilities, tracked as CVE-2026-23864 with a CVSS score of 7.5, stem from incomplete security patches and necessitate immediate remediation. Secur...