Veille CyberInfra — Veille cybersecurite : Microsoft: September updates break File History backup feature Veille CyberInfra — Veille cybersecurite : ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure Veille CyberInfra — Veille cybersecurite : Microsoft reminds admins to migrate Entra ID users to passkeys Veille CyberInfra — Veille cybersecurite : Malicious npm packages evade install-script defenses at runtime Veille CyberInfra — Veille cybersecurite : Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors Veille CyberInfra — Veille cybersecurite : Viral AI actress’ hotline face-scans every caller, watches their mood Veille CyberInfra — Veille cybersecurite : Microsoft: September updates break File History backup feature Veille CyberInfra — Veille cybersecurite : ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure Veille CyberInfra — Veille cybersecurite : Microsoft reminds admins to migrate Entra ID users to passkeys Veille CyberInfra — Veille cybersecurite : Malicious npm packages evade install-script defenses at runtime Veille CyberInfra — Veille cybersecurite : Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors Veille CyberInfra — Veille cybersecurite : Viral AI actress’ hotline face-scans every caller, watches their mood

Veille cybersecurite : Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

27/08/2026

Source : The Hacker News

Credit: Hacktron
Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem.

The Windows path traversal, tracked as CVE-2026-75604&

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog