https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 28 Aug 2026 08:27:14 +0000 https://vulnerability.circl.lu/sighting/966fd94e-3e51-461c-bc43-81992584b848/export {"uuid": "966fd94e-3e51-461c-bc43-81992584b848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "content": "Credit: Hacktron\nVercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem.\n\nThe Windows path traversal, tracked as CVE-2026-75604&", "creation_timestamp": "2026-08-28T01:00:44.937603Z"} {"uuid": "966fd94e-3e51-461c-bc43-81992584b848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "content": "Credit: Hacktron\nVercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem.\n\nThe Windows path traversal, tracked as CVE-2026-75604&", "creation_timestamp": "2026-08-28T01:00:44.937603Z"} https://vulnerability.circl.lu/sighting/966fd94e-3e51-461c-bc43-81992584b848/export Fri, 28 Aug 2026 01:00:44 +0000 https://vulnerability.circl.lu/sighting/6a3c044f-de10-4839-8740-850d996463b6/export {"uuid": "6a3c044f-de10-4839-8740-850d996463b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-28T00:00:52.976185Z"} {"uuid": "6a3c044f-de10-4839-8740-850d996463b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-28T00:00:52.976185Z"} https://vulnerability.circl.lu/sighting/6a3c044f-de10-4839-8740-850d996463b6/export Fri, 28 Aug 2026 00:00:52 +0000 https://vulnerability.circl.lu/sighting/d40f4eaf-3391-4c76-bf6b-630fb14666eb/export {"uuid": "d40f4eaf-3391-4c76-bf6b-630fb14666eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-28T00:00:51.186329Z"} {"uuid": "d40f4eaf-3391-4c76-bf6b-630fb14666eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-28T00:00:51.186329Z"} https://vulnerability.circl.lu/sighting/d40f4eaf-3391-4c76-bf6b-630fb14666eb/export Fri, 28 Aug 2026 00:00:51 +0000 https://vulnerability.circl.lu/sighting/5b5338eb-9b9a-4e77-8d72-eb817efdaee3/export {"uuid": "5b5338eb-9b9a-4e77-8d72-eb817efdaee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/captainsmok3r_official/492", "content": "two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.", "creation_timestamp": "2026-08-28T00:00:11.151921Z"} {"uuid": "5b5338eb-9b9a-4e77-8d72-eb817efdaee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/captainsmok3r_official/492", "content": "two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.", "creation_timestamp": "2026-08-28T00:00:11.151921Z"} https://vulnerability.circl.lu/sighting/5b5338eb-9b9a-4e77-8d72-eb817efdaee3/export Fri, 28 Aug 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/48692862-1d8f-4069-9e85-083ad6ddf186/export {"uuid": "48692862-1d8f-4069-9e85-083ad6ddf186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/493", "content": "poc: https://github.com/rafabd1/CVE-2026-75604-poc", "creation_timestamp": "2026-08-28T00:00:11.103217Z"} {"uuid": "48692862-1d8f-4069-9e85-083ad6ddf186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/493", "content": "poc: https://github.com/rafabd1/CVE-2026-75604-poc", "creation_timestamp": "2026-08-28T00:00:11.103217Z"} https://vulnerability.circl.lu/sighting/48692862-1d8f-4069-9e85-083ad6ddf186/export Fri, 28 Aug 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/300383d1-d600-4ed2-9ca3-c082754ea266/export {"uuid": "300383d1-d600-4ed2-9ca3-c082754ea266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/captainsmok3r_official/492", "content": "two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.", "creation_timestamp": "2026-08-27T22:00:05.937513Z"} {"uuid": "300383d1-d600-4ed2-9ca3-c082754ea266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/captainsmok3r_official/492", "content": "two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.", "creation_timestamp": "2026-08-27T22:00:05.937513Z"} https://vulnerability.circl.lu/sighting/300383d1-d600-4ed2-9ca3-c082754ea266/export Thu, 27 Aug 2026 22:00:05 +0000 https://vulnerability.circl.lu/sighting/a5672d7a-c897-4f5d-bf75-300aa27aa39e/export {"uuid": "a5672d7a-c897-4f5d-bf75-300aa27aa39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/493", "content": "poc: https://github.com/rafabd1/CVE-2026-75604-poc", "creation_timestamp": "2026-08-27T22:00:05.890900Z"} {"uuid": "a5672d7a-c897-4f5d-bf75-300aa27aa39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/493", "content": "poc: https://github.com/rafabd1/CVE-2026-75604-poc", "creation_timestamp": "2026-08-27T22:00:05.890900Z"} https://vulnerability.circl.lu/sighting/a5672d7a-c897-4f5d-bf75-300aa27aa39e/export Thu, 27 Aug 2026 22:00:05 +0000 https://vulnerability.circl.lu/sighting/916bf366-5a92-4acb-89f9-061a2afe4aa3/export {"uuid": "916bf366-5a92-4acb-89f9-061a2afe4aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu3okvouo527", "content": "\ud83e\udd16 Next.js patches two critical unauth RCE flaws: crafted AVIF image (heap overflow in libheif, CVSS 9.5) and Windows path traversal CVE-2026-75604 (CVSS 9.0). Fixed in 15.5.24 / 16.3.3.\nhttps://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "creation_timestamp": "2026-08-27T20:25:08.652362Z"} {"uuid": "916bf366-5a92-4acb-89f9-061a2afe4aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu3okvouo527", "content": "\ud83e\udd16 Next.js patches two critical unauth RCE flaws: crafted AVIF image (heap overflow in libheif, CVSS 9.5) and Windows path traversal CVE-2026-75604 (CVSS 9.0). Fixed in 15.5.24 / 16.3.3.\nhttps://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "creation_timestamp": "2026-08-27T20:25:08.652362Z"} https://vulnerability.circl.lu/sighting/916bf366-5a92-4acb-89f9-061a2afe4aa3/export Thu, 27 Aug 2026 20:25:08 +0000 https://vulnerability.circl.lu/sighting/8ba80c9d-f2c8-4c5c-ae73-3b93b2c2c79a/export {"uuid": "8ba80c9d-f2c8-4c5c-ae73-3b93b2c2c79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "content": "Credit: Hacktron\nVercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem.\n\nThe Windows path traversal, tracked as CVE-2026-75604&", "creation_timestamp": "2026-08-27T19:00:42.064265Z"} {"uuid": "8ba80c9d-f2c8-4c5c-ae73-3b93b2c2c79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "content": "Credit: Hacktron\nVercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem.\n\nThe Windows path traversal, tracked as CVE-2026-75604&", "creation_timestamp": "2026-08-27T19:00:42.064265Z"} https://vulnerability.circl.lu/sighting/8ba80c9d-f2c8-4c5c-ae73-3b93b2c2c79a/export Thu, 27 Aug 2026 19:00:42 +0000 https://vulnerability.circl.lu/sighting/90bede7d-09b7-4656-8069-5ae1578e4bcb/export {"uuid": "90bede7d-09b7-4656-8069-5ae1578e4bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mu3iwqpz542c", "content": "#NextJS: Two Critical Vulnerabilities in NextJS allow unauthenticated #RCE: one through crafted AVIF images, another via path traversal on Windows (CVE-2026-75604). \nUpgrade your NextJS immediately to v15.5.24 or 16.3.3!:\n\ud83d\udc47", "creation_timestamp": "2026-08-27T18:44:38.004000Z"} {"uuid": "90bede7d-09b7-4656-8069-5ae1578e4bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mu3iwqpz542c", "content": "#NextJS: Two Critical Vulnerabilities in NextJS allow unauthenticated #RCE: one through crafted AVIF images, another via path traversal on Windows (CVE-2026-75604). \nUpgrade your NextJS immediately to v15.5.24 or 16.3.3!:\n\ud83d\udc47", "creation_timestamp": "2026-08-27T18:44:38.004000Z"} https://vulnerability.circl.lu/sighting/90bede7d-09b7-4656-8069-5ae1578e4bcb/export Thu, 27 Aug 2026 18:44:38 +0000