https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:00:16.057009+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-16414 bdu:2025-16414 2026-10-04T20:00:16.062177+00:00 bdu:2025-16414 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0896 certfr-2025-avi-0896 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T20:00:16.062227+00:00 certfr-2025-avi-0896 https://cve.radiocsirt.org/vuln/euvd-2026-246688 EUVD-2026-246688 2026-10-04T20:00:16.062260+00:00 EUVD-2026-246688 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49826 fkie_cve-2025-49826 2026-10-04T20:00:16.062283+00:00

Next.js is a React framework for building full-stack web applications. From versions 15.0.4-canary.51 to before 15.1.8, a cache poisoning bug leading to a Denial of Service (DoS) condition was found in Next.js. This issue does not impact customers hosted on Vercel. Under certain conditions, this issue may allow a HTTP 204 response to be cached for static pages, leading to the 204 response being served to all users attempting to access the page. This issue has been addressed in version 15.1.8.

 https://cve.radiocsirt.org/vuln/ghsa-67rr-84xm-4c7r GHSA-67rr-84xm-4c7r — Next.JS vulnerability can lead to DoS via cache poisoning 2026-10-04T20:00:16.062331+00:00

Affected: npm: next

### Summary A vulnerability affecting Next.js has been addressed. It impacted versions 15.0.4 through 15.1.8 and involved a cache poisoning bug leading to a Denial of Service (DoS) condition.

Under certain conditions, this issue may allow a HTTP 204 response to be cached for static pages, leading to the 204 response being served to all users attempting to access the page

More details: [CVE-2025-49826](https://vercel.com/changelog/cve-2025-49826)

## Credits - Allam Rachid [zhero;](https://zhero-web-sec.github.io/research-and-things/) - Allam Yasser (inzo)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1456 WID-SEC-W-2025-1456 — Vercel Next.js: Mehrere Schwachstellen 2026-10-04T20:00:16.062378+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um falsche Informationen darzustellen oder einen Denial of Service Zustand zu verursachen.