{"vulnerability": "CVE-2026-44574", "sightings": [{"uuid": "0a59b7e2-94c5-4665-81ee-d025c6a57fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44574", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mlcfbrg7m62h", "content": "#NextJS and #React Server Components hit with 12 vulnerabilities with 3 high-severity vulns (CVE-2026-44574, CVE-2026-44578, CVE-2026-44581) requiring the most urgent attention and impacting virtually every production NextJS deployment - patch now!", "creation_timestamp": "2026-05-07T23:40:51.533203Z"}, {"uuid": "c2a4e86f-78bf-497e-b586-d2ff592eec00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44574", "type": "seen", "source": "Telegram/xvoYgOFnUf5jFw65_bW2FC7fcn6orx4l4LTjm0d68ZkOEzo", "content": "", "creation_timestamp": "2026-05-08T03:00:06.000000Z"}, {"uuid": "5c54dfd1-cbcd-40f7-b677-e581212ad4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44574", "type": "seen", "source": "https://www.acn.gov.it/portale/w/next.js-aggiornamenti-di-sicurezza-1", "content": "", "creation_timestamp": "2026-05-08T12:09:44.000000Z"}, {"uuid": "b6f0657a-4c3c-47db-b1fe-ad83545ce786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44574", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlrau3trkc2n", "content": "CVE-2026-44574 - Next.js: Middleware / Proxy bypass through dynamic route parameter injection\nCVE ID : CVE-2026-44574\n \n Published : May 13, 2026, 5:16 p.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : Next.js is a React framework for building full-stack web applications. From 15...", "creation_timestamp": "2026-05-13T21:31:33.769183Z"}, {"uuid": "cc8fe8e3-14f1-48eb-b55f-44eb4da65fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44574", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmiwv6n4ju2h", "content": "\ud83d\udccc CVE-2026-44574 - Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware ... https://www.cyberhub.blog/cves/CVE-2026-44574", "creation_timestamp": "2026-05-23T07:37:06.635071Z"}, {"uuid": "aafcced4-acfb-46dd-8dec-edc7cf10896d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44574", "type": "seen", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-09T03:00:04.816051Z"}, {"uuid": "b1f76589-e66b-4e8a-af7a-7e363f6a0e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44574", "type": "seen", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-10T00:00:11.974835Z"}, {"uuid": "d4cc1279-1f55-4995-b95c-a6efdb1b391b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44574", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-11T09:00:04.471225Z"}, {"uuid": "5b21229d-3dd5-4001-87f7-f68796b002dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44574", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-12T00:00:53.146741Z"}]}