https://poc.intelseclab.com/tags/react-flight/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-dos-flight-deserialization/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-dos-flight-deserialization/High severity (CVSS 7.5) — web · CVE-2026-23870. Status: Weaponized. Affects: Next.js App Router (React server-action / RSC reply parser). Tags: DoS, RSC, React-Flight, deserialization, cyclic-payload, Next.js, App-Router, unauthenticated, pre-auth.webHighDoSRSCReact-Flightdeserializationcyclic-payloadNext.jsApp-Routerunauthenticatedpre-auth