https://poc.intelseclab.com/tags/dynamic-route/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-dynamic-route-injection-auth-bypass/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-dynamic-route-injection-auth-bypass/High severity (CVSS 8.1) — web · CVE-2026-44574. Status: Weaponized. Affects: Next.js App Router with dynamic route segments and middleware-based access control. Tags: auth-bypass, dynamic-route, nxtP-injection, middleware-bypass, param-smuggling, Next.js, App-Router, unauthenticated.webHighauth-bypassdynamic-routenxtP-injectionmiddleware-bypassparam-smugglingNext.jsApp-Routerunauthenticated