emresandikci/nextjs-cve-2026-23870-checker

PoC

Checker and fixer for all 13 vulnerabilities in the Next.js May 2026 security release (CVE-2026-23870)

view exploit source poc_in_githubauthor emresandikcipublished 2026-05-13catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-23870US	—	1.53% (75th)	Exploit	2026-05-06
A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory excep…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.