Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

[Starburst-David]

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw.

Published Date: Oct 15, 2026

Read More: https://thehackernews.com/2026/10/nextj ... r-two.html

Vulnerabilities has been mentioned in this article:
CVE-2026-96889