Nginx Vulnerability Affects Rewrite Module
A critical vulnerability (CVE-2026-44575) with a high severity rating of 7.5 affects Next.js versions from 15.2.0 up to, but not including, 15.5.16 and 16.2.5. The flaw impacts App Router applications utilizing middleware or proxy configurations.
Topics
Developing
- 863d Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore.
- 863d Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur.
- 863d Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est.
- 863d Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium.
Sources · 7 independent
NPR
“A vulnerability has been identified in the Nginx rewrite module.”
Unlock the full story
Get a Pro subscription or above to see the live story progression and the full list of independent sources confirming each event as they happen.
Log in to upgrade