{"uuid": "f0805f68-5553-4f75-9222-99daa079c168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/117178773943525377", "content": "Next.js patched two critical flaws that let an unauthenticated attacker run code on the server.\nApps on Vercel are already fixed. Self-hosted deployments are not.\nUpdate to 15.5.24 or 16.3.3 now. (CVE-2026-75604)\nhttps://suriq.io/blog/nextjs-critical-flaws-self-hosted-rce\n#CVE #CloudSecurity #infosec #cybersecurity", "creation_timestamp": "2026-08-29T16:16:16.344597Z"}