Trendmast

Technology news, aggregated

ad slot · header banner 728×90
Cyber Security

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Image: The Hacker News

ad slot · in-content video 16:9

Coverage

More coverage

  • The Hacker News · August 27, 2026 15:13
    Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting…