World Cybersecurity NewsWorld Cybersecurity NewsHome

Topic

Next.js

Passkeys in Production: How One Developer Replaced Passwords with Face ID in Three Days Using FastAPI and Next.js
🇷🇺Habr•Oct 11

Passkeys in Production: How One Developer Replaced Passwords with Face ID in Three Days Using FastAPI and Next.js

Other
Exploiting CVE-2025-55182 React2Shell Vulnerability on Hack The Box Reactor Machine
🇷🇺Habr•Sep 11

Exploiting CVE-2025-55182 React2Shell Vulnerability on Hack The Box Reactor Machine

Vulnerabilities & Exploits
Weekly Roundup: Next.js Leads Critical Vulnerability Reports as Chrome, Tomcat, and PostgreSQL See Major Patches
🇯🇵Security NEXT•Aug 31

Weekly Roundup: Next.js Leads Critical Vulnerability Reports as Chrome, Tomcat, and PostgreSQL See Major Patches

Vulnerabilities & Exploits

Premium Weekly Digest

Exclusive cybersecurity analysis, straight to your inbox

Curated intelligence you won't find in the free feed. $9.99/week, cancel anytime.

Subscribe
🇵🇹Aug 27

Next.js Patches Two Critical RCE Vulnerabilities in Versions 15.5.24 and 16.3.3

Next.js has released security updates to address two critical vulnerabilities that could allow unauthenticated remote code execution. The fixes are available in versions 15.5.24 and 16.3.3. The first issue, tracked as CVE-2026-75604 with a CVSS score of 9.0, affects applications hosted on Windows servers using Pages Router or App Router without Cache Components and stems from a path traversal flaw. The second vulnerability impacts the Image Optimization API when processing malicious AVIF files, enabling code execution through crafted image inputs. Both flaws affect a wide range of versions from 10.0.0 and 13.4 onward. Administrators are advised to update immediately, rebuild containers, and verify production environments run the patched releases, especially on Windows systems and those handling user-uploaded images.

BoletimSec•Vulnerabilities & Exploits