EDB-52124

PoC

Next.js Middleware 15.2.2 - Authorization Bypass

view exploit source exploit_dbtype webappsauthor kOaDTpublished 2025-04-05catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-29927US—OT highExploit
Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypas…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan