Exploit for Server-Side Request Forgery in Vercel Next.Js

CVE-2026-44578

githubexploit · 2026-08-18

Description

SSRF vulnerability in Vercel Next.js allows server-side request forgery attacks.

Affected Vercel Next.js versions

Vercel Next.js< 15.5.16, 16.2.5

All known vulnerabilities by product

Node.Js

CVSS 8.6 for CVE-2026-44578

8.6

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

Working code

100%confidence this exploit runs

Based on 7 file(s) in the source

Exploit Details

Modified:2026-08-18 14:47

Last Seen:2026-08-18 14:50

Reporter:lxxexxbxx

Written in:Python

Last commit:2026-08-18

Other exploits for CVE-2026-44578

Exploit for Server-Side Request Forgery in Vercel Next.Js

2026-06-20 GadaLuBau1337GITHUB

HackTheBox

2026-06-07 infantesromeroadrianGITHUB

Exploit for Server-Side Request Forgery in Vercel Next.Js

2026-06-01 BS2010-AirborneTroopsGITHUB

patch-to-exploit

2026-05-26 unknownhadGITHUB

Exploit for Server-Side Request Forgery in Vercel Next.Js

2026-05-16 dinosnGITHUB

Exploit for Server-Side Request Forgery in Vercel Next.Js

2026-05-15 ynsmroztasGITHUB

Exploit for Server-Side Request Forgery in Vercel Next.Js

2026-05-15 tocong282GITHUB

Exploit for Server-Side Request Forgery in Vercel Next.Js

2026-05-15 love07ojGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=EB1B50B1-4452-58EB-A829-C31DFECD8E19
CVE-2026-44578 PoC

Exploit Code

Share

Share on social media: