Dashboard / CVE-2026-45109

CVE-2026-45109

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-05-13 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fixed in 15.5.18 and 16.2.6.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
vercel next.js 15.2.0 – 15.5.18

References & Advisories (8)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.60%
Raw Score 0.006020
Percentile 48.7%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00602
2026-10-28
0.00602

Intelligence Sources

nvd ref →

External Links