Frequency
5
occurrences
First Seen
August 25, 2026
Last Seen
August 28, 2026
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—
Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Vercel disclosed two critical vulnerabilities in Next.js affecting applications using the AVIF image format and Windows servers. The first vulnerability, tracked as GHSA-2xp9-vwfh-vxw4, allows unauthenticated remote code execution via crafted AVIF inputs processed by the libheif library. The second...
Public Exploits
Checking GitHub for proof-of-concept code…
