🧰 Next.js

The items that name it 16

• Dark Web Intelligence (@DailyDarkWeb) on X
  advisoryas tools2026-10-16It is written here as Next.js (Vercel web framework; subject of the security update).

  Vercel web framework; subject of the security update

• Dan Kornas (@DanKornas) on X
  repoas classification.technologies2026-10-11
• trhhubsd/ARTEX
  repoas classification.technologies2026-10-08
• jiwoochris/artex-global
  repoas classification.technologies2026-10-03
• https://github.com/akha-security/akca
  repoas affected products2026-09-23

  middleware bypass checks covered by AKCA

• ThreatIntel-Aggregator
  repoas tools2026-09-17

  Frontend framework (v16) for the dark-mode web dashboard

• Metasploit Wrap Up: This One Goes to Sixteen!
  articleas affected products2026-09-11

  Versions 13.4.0 up to 15.5.24, and 16.0.0 up to 16.3.3; unauthenticated RCE on Windows servers (CVE-2026-75604)

• bikini/exploitarium
  repoas affected products2026-09-07It is written here as Next.js (unstable_cache object argument collision).

  unstable_cache object argument collision

• Claude as Autonomous Bug Bounty Hunter
  articleas affected products2026-07-30
• Socket: Next.js Moves to Scheduled Security Releases
  articleas classification.technologies2026-07-16
• PolinRider Confirmed Footprint Grows 6.5x Since March
  writeupas classification.technologies2026-07-15
• VeridionLabs/veridion
  repoas classification.technologies2026-07-07
• Negative Days in LLM Workflows
  writeupas classification.technologies2026-05-05
• Untangling a Linux Incident With an OpenAI Twist (Part 2)
  writeupas affected products2026-04-22

  Affected by CVE-2025-55182 (React2Shell), running one of the vibecoded applications

• PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182
  writeupas affected products2025-12-10
• Lonkero — Rust web vulnerability scanner (v3.7, AI agent mode)
  repoas affected products

  v14 referenced in example; route discovery, middleware bypass (CVE-2024-34351, CVE-2025-29927), _next/data exposure, server actions, image SSRF, ISR token exposure

In every workspace you can read 23