8.6
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
CVE-2026-44578 - Next.js WebSocket SSRF PoC Vulnerability: Server-Side Request Forgery in Next.js WebSocket upgrade handler 13.4.13 → 15.5.15, 16.0.0 → 16.1.6 Usage bash Detect vulnerability python3 poc.py target.com:3000 --detect Tunnel to internal...
Basic Information
ID
81295CB4-B089-54E0-B6FF-1FACB4C142ED
Published
May 15, 2026 at 09:02