https://poc.intelseclab.com/tags/x-nextjs-data/Latest proof-of-concept entries.Hugoen-usSun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-x-nextjs-data-cache-poisoning/Sun, 17 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-17_nextjs-x-nextjs-data-cache-poisoning/Low severity (CVSS 3.1) — web · CVE-2026-44572. Status: Researched. Affects: Next.js Pages Router (redirect handling via middleware or next.config.js). Tags: cache-poisoning, x-nextjs-data, redirect, CDN, header-smuggling, Next.js, Pages-Router, unauthenticated.webLowcache-poisoningx-nextjs-dataredirectCDNheader-smugglingNext.jsPages-Routerunauthenticated