Vulnerabilities

Next.js Patches Critical AVIF and Windows RCE Flaws

August 27, 2026 1 min read 5 views
cybersecurity threats news
Vercel patched two critical Next.js vulnerabilities enabling unauthenticated RCE via AVIF images and a Windows path traversal flaw (CVE-2026-75604).

Was this article helpful?

0 found this helpful

Related Articles

Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog

5 min read

Jev and other decision models can still be tricked with prompt injection

3 min read

EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

1 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo