VDB
GCVE-110-NCSC-2025-96
GCVE-110-NCSC-2025-96
Advisory PublishedCVSS 9.1/10
Vercel heeft een kwetsbaarheid verholpen in Next.js (Specifiek voor versies 14.2.25 en 15.2.3)
Weaknesses (CWE)
CWE-285Improper Authorization
Risk Scores
CVSS 3.1
9.1/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Vercel | vers:unknown/unknown | — | — |
| Vercel | vers:unknown/>=11.1.4|<=13.5.6 | — | — |
| Vercel | vers:unknown/>14.0.0|<14.2.25 | — | — |
| Vercel | vers:unknown/>15.0.0|<15.2.3 | — | — |
Aliases
Browse GCVE Records
73,442 records in the GCVE database · Updated July 17, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.