Frequency
5
occurrences
First Seen
August 25, 2026
Last Seen
August 28, 2026
Related Threat Clusters
-
Next.js Security Release Addresses Critical Remote Code Execution Vulnerabilities
Vercel disclosed two critical vulnerabilities in Next.js affecting applications using the AVIF image format and Windows servers. The first vulnerability, tracked as GHSA-2xp9-vwfh-vxw4, allows unauthenticated remote…
9 articles · Updated August 27, 2026
Recent Intelligence Reports
- Nextjs August 2026 Security Release — vercel.com · August 28, 2026
- Two critical vulnerabilities in Next.js – remote code execution on Windows — Heise.De · August 28, 2026
- Critical Next.js Vulnerabilities Enables Remote Code Execution Attacks — Cybersecuritynews · August 26, 2026
- WAF Release - 2026-08-26 - Emergency · Changelog — Developers.Cloudflare · August 26, 2026
- August 2026 Security Release — Nextjs · August 25, 2026