https://poc.intelseclab.com/tags/csp-nonce/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-csp-nonce-cache-poisoned-xss/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-csp-nonce-cache-poisoned-xss/Medium severity (CVSS 4.7) — web · CVE-2026-44581. Status: Weaponized. Affects: Next.js App Router applications using CSP nonces. Tags: XSS, cache-poisoning, CSP-nonce, Next.js, App-Router, unauthenticated.webMediumXSScache-poisoningCSP-nonceNext.jsApp-Routerunauthenticated