{"uuid": "90bede7d-09b7-4656-8069-5ae1578e4bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mu3iwqpz542c", "content": "#NextJS: Two Critical Vulnerabilities in NextJS allow unauthenticated #RCE: one through crafted AVIF images, another via path traversal on Windows (CVE-2026-75604). \nUpgrade your NextJS immediately to v15.5.24 or 16.3.3!:\n\ud83d\udc47", "creation_timestamp": "2026-08-27T18:44:38.004000Z"}