https://poc.intelseclab.com/tags/pages-router/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-x-nextjs-data-cache-poisoning/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-x-nextjs-data-cache-poisoning/Low severity (CVSS 3.1) — web · CVE-2026-44572. Status: Researched. Affects: Next.js Pages Router (redirect handling via middleware or next.config.js). Tags: cache-poisoning, x-nextjs-data, redirect, CDN, header-smuggling, Next.js, Pages-Router, unauthenticated.webLowcache-poisoningx-nextjs-dataredirectCDNheader-smugglingNext.jsPages-Routerunauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-i18n-middleware-bypass/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-i18n-middleware-bypass/High severity (CVSS 7.5) — web · CVE-2026-44573. Status: Weaponized. Affects: Next.js Pages Router with i18n configuration. Tags: middleware-bypass, i18n, _next/data, Pages-Router, authorization-bypass, information-disclosure, Next.js, unauthenticated.webHighmiddleware-bypassi18n_next/dataPages-Routerauthorization-bypassinformation-disclosureNext.jsunauthenticated