CVE-2026-64649
Server-side request forgery in Vercel Next.js
CVSS Skor
6.5
EPSS İhtimal
%0.5
Risk Skoru
0.0
Yayın
2 ay önce
İlgili Siber Güvenlik Haberleri (Newsroom)
Bu zafiyetin basında ve siber güvenlik yayın organlarında yer aldığı makaleler ve analiz bültenleri:
⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended. Some of it was clever. Most of it was just access left lying around: old bugs, exposed gear, poisoned dependencies, weak defaults, and tooling that moved from
İlgili Benzer Açıklar
10.0
CVE-2025-55182 Aktif sömürülüyorDeserialization of untrusted data in Meta React Server Dom Webpack
Yama doğrulandı Public Exploits:2EPSS %100
7.5
CVE-2025-55184Deserialization of untrusted data in Facebook React
Yama durumu bilinmiyor Public Exploits:8EPSS %67
5.3
CVE-2025-55183Vulnerability in Facebook React
Yama durumu bilinmiyor Public Exploits:4EPSS %64
7.5
CVE-2025-67779Deserialization of untrusted data in Facebook React
Yama durumu bilinmiyor Public Exploits:1EPSS %20
7.5
CVE-2026-8767Command injection in Vercel AI
Yama durumu bilinmiyor Public Exploits:1EPSS %7
8.2
CVE-2025-57822Server-side request forgery in Vercel Next.js
Yama doğrulandı Public Exploits:1EPSS %3
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-64649"