https://poc.intelseclab.com/tags/app-router/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-dos-flight-deserialization/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-dos-flight-deserialization/High severity (CVSS 7.5) — web · CVE-2026-23870. Status: Weaponized. Affects: Next.js App Router (React server-action / RSC reply parser). Tags: DoS, RSC, React-Flight, deserialization, cyclic-payload, Next.js, App-Router, unauthenticated, pre-auth.webHighDoSRSCReact-Flightdeserializationcyclic-payloadNext.jsApp-Routerunauthenticatedpre-authhttps://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-dynamic-route-injection-auth-bypass/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-dynamic-route-injection-auth-bypass/High severity (CVSS 8.1) — web · CVE-2026-44574. Status: Weaponized. Affects: Next.js App Router with dynamic route segments and middleware-based access control. Tags: auth-bypass, dynamic-route, nxtP-injection, middleware-bypass, param-smuggling, Next.js, App-Router, unauthenticated.webHighauth-bypassdynamic-routenxtP-injectionmiddleware-bypassparam-smugglingNext.jsApp-Routerunauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-csp-nonce-cache-poisoned-xss/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-csp-nonce-cache-poisoned-xss/Medium severity (CVSS 4.7) — web · CVE-2026-44581. Status: Weaponized. Affects: Next.js App Router applications using CSP nonces. Tags: XSS, cache-poisoning, CSP-nonce, Next.js, App-Router, unauthenticated.webMediumXSScache-poisoningCSP-nonceNext.jsApp-Routerunauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-beforeinteractive-script-xss/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-beforeinteractive-script-xss/Medium severity (CVSS 6.1) — web · CVE-2026-44580. Status: Weaponized. Affects: Next.js applications using next/script with strategy="beforeInteractive". Tags: XSS, next/script, beforeInteractive, Next.js, App-Router, unauthenticated.webMediumXSSnext/scriptbeforeInteractiveNext.jsApp-Routerunauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-segment-prefetch-middleware-bypass/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-segment-prefetch-middleware-bypass/High severity (CVSS 7.5) — web · CVE-2026-44575. Status: Weaponized. Affects: Next.js App Router applications that rely on middleware.ts matchers to protect routes. Tags: authorization-bypass, middleware-bypass, App-Router, segment-prefetch, RSC, Next.js, unauthenticated.webHighauthorization-bypassmiddleware-bypassApp-Routersegment-prefetchRSCNext.jsunauthenticated