773 PoCs | 119 CISA KEV

tag

Cache Poisoning

Next.js Windows Cache Path Traversal RCE (CVE-2026-75604)

CVE-2026-75604 web Unverified

CVE-2026-75604webCRITICAL 9Unverified2026-09-03Apache Traffic Server Internal @Header Metadata Spoofing (CVE-2026-33267)

CVE-2026-33267 / GHSA-jrh6-9hgv-mqm7 web Patched

CVE-2026-33267 / GHSA-jrh6-9hgv-mqm7webCRITICAL 10Patched2026-08-16ASP.NET Core Kestrel HTTP Request Smuggling (CVE-2025-55315) EPSS 66%

CVE-2025-55315 network Patched

CVE-2025-55315networkCRITICAL 9.9Patched2026-07-06dnsmasq EDNS Client Subnet (ECS) Response Validation Bypass (CVE-2026-4893)

CVE-2026-4893 network Patched

CVE-2026-4893networkMEDIUMPatched2026-07-05nghttpx HTTP/1.1 Upgrade Request Body Response Queue Poisoning

None assigned as of 2026-07-03 network Patched

None assigned as of 2026-07-03networkHIGHPatched2026-07-03Next.js unstable_cache Object-Argument Cache-Key Collision

None assigned as of 2026-07-03 web Unverified

None assigned as of 2026-07-03webHIGHUnverified2026-07-03Next.js x-nextjs-data Cache Poisoning (CVE-2026-44572)

CVE-2026-44572 web Patched

CVE-2026-44572webLOW 3.1Patched2026-05-17Next.js RSC Response Cache Poisoning (CVE-2026-44576)

CVE-2026-44576 web Patched

CVE-2026-44576webMEDIUM 5.4Patched2026-05-17Next.js RSC Cache-Busting Weak Hash Collision (CVE-2026-44582)

CVE-2026-44582 web Patched

CVE-2026-44582webLOW 3.7Patched2026-05-17Next.js CSP Nonce Cache-Poisoned XSS (CVE-2026-44581)

CVE-2026-44581 web Patched

CVE-2026-44581webMEDIUM 4.7Patched2026-05-17