CVE-2026-44574 – Next.js: Middleware / Proxy bypass through dynamic route parameter injection
CVE ID :CVE-2026-44574 Published : May 13, 2026, 5:16 p.m. | 44 minutes ago Description :Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes…
