Exploit for Server-Side Request Forgery in Vercel Next.Js CVE-2026-44578

Name: Exploit for Server-Side Request Forgery in Vercel Next.Js CVE-2026-44578
Rating: 5 (121 reviews)

2026-05-15 | CVSS 8.6

## https://sploitus.com/exploit?id=ED455DFD-3A3F-5522-B7A0-71F215C7F9AD
# nextjs-cve-2026-44578
Nuclei templates for detecting CVE-2026-44578 (Next.js WebSocket Upgrade SSRF) with multi-cloud metadata validation, Next.js fingerprinting, and real-world scanning workflows. Includes references to the original NextSSRF research and exploit tooling.