https://poc.intelseclab.com/tags/response-confusion/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-response-cache-poisoning/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-rsc-response-cache-poisoning/Medium severity (CVSS 5.4) — web · CVE-2026-44576. Status: Weaponized. Affects: Next.js App Router deployments using React Server Components (RSC) behind shared caches. Tags: cache-poisoning, RSC, response-confusion, Next.js, shared-cache, unauthenticated.webMediumcache-poisoningRSCresponse-confusionNext.jsshared-cacheunauthenticated