https://poc.intelseclab.com/tags/segment-prefetch/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-segment-prefetch-middleware-bypass/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-segment-prefetch-middleware-bypass/High severity (CVSS 7.5) — web · CVE-2026-44575. Status: Weaponized. Affects: Next.js App Router applications that rely on middleware.ts matchers to protect routes. Tags: authorization-bypass, middleware-bypass, App-Router, segment-prefetch, RSC, Next.js, unauthenticated.webHighauthorization-bypassmiddleware-bypassApp-Routersegment-prefetchRSCNext.jsunauthenticated