⚠️ Next.js patched two critical flaws that can enable unauthenticated RCE.
One affects Windows-hosted apps. The other requires AVIF optimization. No exploitation has been reported.
Details: https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html
7
4
2August 27, 2026 7.2K 43