Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
CVSS score
9.0
EPSS probability
%2.1
Risk score
0.2
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Research lab and exploit chain for CVE-2026-75604: path traversal in the Next.js incremental cache, to RCE on Windows.
A Python-based exploitation framework for CVE-2026-75604 that enables authorized penetration testers to validate Next.js Windows cache traversal vulnerabilities. Deploys reverse shells and webshells via path traversal, with built-in target verification and proxy support for seamless integration into standard pentest workflows.
CVE-2026-75604 (Next.js Windows RCE) PoC - unauthenticated RCE via cache path traversal + forged Server Action; for authorized security testing
Similar Vulnerabilities
Deserialization of untrusted data in Meta React Server Dom Webpack
Deserialization of untrusted data in Facebook React
Vulnerability in Facebook React
Path traversal in Shopify React Router/node
Deserialization of untrusted data in Facebook React
@openhop/server: Path Traversal in Flow ID File Operations
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-75604"