Vercel Next.js: Mehrere Schwachstellen ermöglichen Codeausführung — WID-SEC-2026-3027
BSI · WID-SEC-2026-3027
ID
WID-SEC-2026-3027
WID-SEC-2026-3027
Date
Updated
Source
BSI
BSI
Threat
critical
critical
Summary
Next.js ist ein Framework für React-basierte Web-Anwendungen.
Timeline
- Published by source
- 2026-08-26
- Last source activity
- 2026-09-02
- Time from publication to latest source activity
- 7 days
Risk context
- Reported severity or threat level: critical.
What to do
General, cautious steps (verify details in the official source):
- Prioritize patching or mitigation immediately (treat as actively risky).
- Identify affected product versions in your inventory and verify whether you are impacted.
- Apply vendor patches/updates or recommended mitigations as soon as available.
- Read the official advisory for exact affected versions and remediation steps.
Official advisory
Evidence and provenance
- Canonical advisory ID
- WID-SEC-2026-3027
- Source
- BSI
- Published by source
- 2026-08-26
- Last source activity
- 2026-09-02
- Additional identifiers
- CVE-2026-75604
- Curated by
- hlukh.ch
Related advisories and connections
These advisories are connected by shared CVE, product, vendor, source, or time signals.